Oct 2 19:00:33.758820 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Oct 2 19:00:33.758840 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 19:00:33.758848 kernel: efi: EFI v2.70 by EDK II Oct 2 19:00:33.758854 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Oct 2 19:00:33.758859 kernel: random: crng init done Oct 2 19:00:33.758864 kernel: ACPI: Early table checksum verification disabled Oct 2 19:00:33.758871 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Oct 2 19:00:33.758877 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Oct 2 19:00:33.758883 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:00:33.758888 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:00:33.758895 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:00:33.758900 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:00:33.758905 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:00:33.758911 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:00:33.758919 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:00:33.758925 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:00:33.758931 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:00:33.758937 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Oct 2 19:00:33.758949 kernel: NUMA: Failed to initialise from firmware Oct 2 19:00:33.758985 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 19:00:33.758992 kernel: NUMA: NODE_DATA [mem 0xdcb0a900-0xdcb0ffff] Oct 2 19:00:33.758998 kernel: Zone ranges: Oct 2 19:00:33.759008 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 19:00:33.759016 kernel: DMA32 empty Oct 2 19:00:33.759022 kernel: Normal empty Oct 2 19:00:33.759027 kernel: Movable zone start for each node Oct 2 19:00:33.759033 kernel: Early memory node ranges Oct 2 19:00:33.759038 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Oct 2 19:00:33.759044 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Oct 2 19:00:33.759050 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Oct 2 19:00:33.759056 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Oct 2 19:00:33.759061 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Oct 2 19:00:33.759067 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Oct 2 19:00:33.759073 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Oct 2 19:00:33.759079 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 19:00:33.759086 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Oct 2 19:00:33.759092 kernel: psci: probing for conduit method from ACPI. Oct 2 19:00:33.759097 kernel: psci: PSCIv1.1 detected in firmware. Oct 2 19:00:33.759103 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 19:00:33.759108 kernel: psci: Trusted OS migration not required Oct 2 19:00:33.759117 kernel: psci: SMC Calling Convention v1.1 Oct 2 19:00:33.759123 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Oct 2 19:00:33.759130 kernel: ACPI: SRAT not present Oct 2 19:00:33.759137 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 19:00:33.759143 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 19:00:33.759149 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Oct 2 19:00:33.759155 kernel: Detected PIPT I-cache on CPU0 Oct 2 19:00:33.759162 kernel: CPU features: detected: GIC system register CPU interface Oct 2 19:00:33.759168 kernel: CPU features: detected: Hardware dirty bit management Oct 2 19:00:33.759173 kernel: CPU features: detected: Spectre-v4 Oct 2 19:00:33.759179 kernel: CPU features: detected: Spectre-BHB Oct 2 19:00:33.759187 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 19:00:33.759193 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 19:00:33.759199 kernel: CPU features: detected: ARM erratum 1418040 Oct 2 19:00:33.759205 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Oct 2 19:00:33.759211 kernel: Policy zone: DMA Oct 2 19:00:33.759218 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:00:33.759225 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:00:33.759231 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:00:33.759237 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:00:33.759243 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:00:33.759249 kernel: Memory: 2459276K/2572288K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 113012K reserved, 0K cma-reserved) Oct 2 19:00:33.759256 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 2 19:00:33.759262 kernel: trace event string verifier disabled Oct 2 19:00:33.759268 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 19:00:33.759275 kernel: rcu: RCU event tracing is enabled. Oct 2 19:00:33.759281 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 2 19:00:33.759287 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 19:00:33.759293 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:00:33.759299 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:00:33.759305 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 2 19:00:33.759315 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 19:00:33.759322 kernel: GICv3: 256 SPIs implemented Oct 2 19:00:33.759329 kernel: GICv3: 0 Extended SPIs implemented Oct 2 19:00:33.759335 kernel: GICv3: Distributor has no Range Selector support Oct 2 19:00:33.759341 kernel: Root IRQ handler: gic_handle_irq Oct 2 19:00:33.759347 kernel: GICv3: 16 PPIs implemented Oct 2 19:00:33.759353 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Oct 2 19:00:33.759358 kernel: ACPI: SRAT not present Oct 2 19:00:33.759364 kernel: ITS [mem 0x08080000-0x0809ffff] Oct 2 19:00:33.759370 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Oct 2 19:00:33.759377 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Oct 2 19:00:33.759383 kernel: GICv3: using LPI property table @0x00000000400d0000 Oct 2 19:00:33.759391 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Oct 2 19:00:33.759397 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:00:33.759405 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Oct 2 19:00:33.759411 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Oct 2 19:00:33.759417 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Oct 2 19:00:33.759423 kernel: arm-pv: using stolen time PV Oct 2 19:00:33.759429 kernel: Console: colour dummy device 80x25 Oct 2 19:00:33.759435 kernel: ACPI: Core revision 20210730 Oct 2 19:00:33.759442 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Oct 2 19:00:33.759448 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:00:33.759454 kernel: LSM: Security Framework initializing Oct 2 19:00:33.759460 kernel: SELinux: Initializing. Oct 2 19:00:33.759468 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:00:33.759475 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:00:33.759481 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:00:33.759488 kernel: Platform MSI: ITS@0x8080000 domain created Oct 2 19:00:33.759494 kernel: PCI/MSI: ITS@0x8080000 domain created Oct 2 19:00:33.759500 kernel: Remapping and enabling EFI services. Oct 2 19:00:33.759507 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:00:33.759514 kernel: Detected PIPT I-cache on CPU1 Oct 2 19:00:33.759520 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Oct 2 19:00:33.759528 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Oct 2 19:00:33.759534 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:00:33.759541 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Oct 2 19:00:33.759547 kernel: Detected PIPT I-cache on CPU2 Oct 2 19:00:33.759553 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Oct 2 19:00:33.759615 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Oct 2 19:00:33.759622 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:00:33.759628 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Oct 2 19:00:33.759634 kernel: Detected PIPT I-cache on CPU3 Oct 2 19:00:33.759640 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Oct 2 19:00:33.759649 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Oct 2 19:00:33.759655 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:00:33.759661 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Oct 2 19:00:33.759668 kernel: smp: Brought up 1 node, 4 CPUs Oct 2 19:00:33.759679 kernel: SMP: Total of 4 processors activated. Oct 2 19:00:33.759687 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 19:00:33.759694 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 2 19:00:33.759700 kernel: CPU features: detected: Common not Private translations Oct 2 19:00:33.759707 kernel: CPU features: detected: CRC32 instructions Oct 2 19:00:33.759714 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 2 19:00:33.759721 kernel: CPU features: detected: LSE atomic instructions Oct 2 19:00:33.759728 kernel: CPU features: detected: Privileged Access Never Oct 2 19:00:33.759736 kernel: CPU features: detected: RAS Extension Support Oct 2 19:00:33.759742 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Oct 2 19:00:33.759748 kernel: CPU: All CPU(s) started at EL1 Oct 2 19:00:33.759755 kernel: alternatives: patching kernel code Oct 2 19:00:33.759761 kernel: devtmpfs: initialized Oct 2 19:00:33.759769 kernel: KASLR enabled Oct 2 19:00:33.759776 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:00:33.759783 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 2 19:00:33.759789 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:00:33.759796 kernel: SMBIOS 3.0.0 present. Oct 2 19:00:33.759806 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Oct 2 19:00:33.759812 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:00:33.759819 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 19:00:33.759826 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 19:00:33.759834 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 19:00:33.759840 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:00:33.759847 kernel: audit: type=2000 audit(0.033:1): state=initialized audit_enabled=0 res=1 Oct 2 19:00:33.759853 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:00:33.759860 kernel: cpuidle: using governor menu Oct 2 19:00:33.759866 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 19:00:33.759873 kernel: ASID allocator initialised with 32768 entries Oct 2 19:00:33.759880 kernel: ACPI: bus type PCI registered Oct 2 19:00:33.759886 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:00:33.759894 kernel: Serial: AMBA PL011 UART driver Oct 2 19:00:33.759900 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:00:33.759907 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 19:00:33.759913 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:00:33.759920 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 19:00:33.759926 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:00:33.759933 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 19:00:33.759943 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:00:33.759950 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:00:33.759972 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:00:33.759981 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:00:33.759988 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:00:33.759995 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:00:33.760005 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:00:33.760012 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:00:33.760019 kernel: ACPI: Interpreter enabled Oct 2 19:00:33.760026 kernel: ACPI: Using GIC for interrupt routing Oct 2 19:00:33.760032 kernel: ACPI: MCFG table detected, 1 entries Oct 2 19:00:33.760041 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Oct 2 19:00:33.760047 kernel: printk: console [ttyAMA0] enabled Oct 2 19:00:33.760054 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:00:33.760204 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:00:33.760273 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 2 19:00:33.760342 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 2 19:00:33.760404 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Oct 2 19:00:33.760467 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Oct 2 19:00:33.760475 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Oct 2 19:00:33.760482 kernel: PCI host bridge to bus 0000:00 Oct 2 19:00:33.760553 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Oct 2 19:00:33.760608 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 2 19:00:33.760663 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Oct 2 19:00:33.760716 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:00:33.760799 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Oct 2 19:00:33.760872 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 19:00:33.760935 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Oct 2 19:00:33.761020 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Oct 2 19:00:33.761089 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Oct 2 19:00:33.761202 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Oct 2 19:00:33.761270 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Oct 2 19:00:33.761341 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Oct 2 19:00:33.761398 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Oct 2 19:00:33.761452 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 2 19:00:33.761506 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Oct 2 19:00:33.761515 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 2 19:00:33.761521 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 2 19:00:33.761528 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 2 19:00:33.761535 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 2 19:00:33.761543 kernel: iommu: Default domain type: Translated Oct 2 19:00:33.761550 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 19:00:33.761556 kernel: vgaarb: loaded Oct 2 19:00:33.761563 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:00:33.761569 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:00:33.761576 kernel: PTP clock support registered Oct 2 19:00:33.761582 kernel: Registered efivars operations Oct 2 19:00:33.761589 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 19:00:33.761595 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:00:33.761604 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:00:33.761610 kernel: pnp: PnP ACPI init Oct 2 19:00:33.761680 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Oct 2 19:00:33.761690 kernel: pnp: PnP ACPI: found 1 devices Oct 2 19:00:33.761697 kernel: NET: Registered PF_INET protocol family Oct 2 19:00:33.761704 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:00:33.761711 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:00:33.761718 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:00:33.761727 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:00:33.761734 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:00:33.761740 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:00:33.761747 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:00:33.761754 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:00:33.761761 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:00:33.761767 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:00:33.761774 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Oct 2 19:00:33.761781 kernel: kvm [1]: HYP mode not available Oct 2 19:00:33.761789 kernel: Initialise system trusted keyrings Oct 2 19:00:33.761796 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:00:33.761803 kernel: Key type asymmetric registered Oct 2 19:00:33.761809 kernel: Asymmetric key parser 'x509' registered Oct 2 19:00:33.761816 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:00:33.761823 kernel: io scheduler mq-deadline registered Oct 2 19:00:33.761829 kernel: io scheduler kyber registered Oct 2 19:00:33.761835 kernel: io scheduler bfq registered Oct 2 19:00:33.761842 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 2 19:00:33.761850 kernel: ACPI: button: Power Button [PWRB] Oct 2 19:00:33.761857 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 2 19:00:33.761920 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Oct 2 19:00:33.761929 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:00:33.761936 kernel: thunder_xcv, ver 1.0 Oct 2 19:00:33.761943 kernel: thunder_bgx, ver 1.0 Oct 2 19:00:33.761949 kernel: nicpf, ver 1.0 Oct 2 19:00:33.761981 kernel: nicvf, ver 1.0 Oct 2 19:00:33.762052 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 19:00:33.762111 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T19:00:33 UTC (1696273233) Oct 2 19:00:33.762120 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:00:33.762127 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:00:33.762133 kernel: Segment Routing with IPv6 Oct 2 19:00:33.762140 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:00:33.762147 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:00:33.762153 kernel: Key type dns_resolver registered Oct 2 19:00:33.762160 kernel: registered taskstats version 1 Oct 2 19:00:33.762168 kernel: Loading compiled-in X.509 certificates Oct 2 19:00:33.762174 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 19:00:33.762181 kernel: Key type .fscrypt registered Oct 2 19:00:33.762187 kernel: Key type fscrypt-provisioning registered Oct 2 19:00:33.762194 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:00:33.762200 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:00:33.762207 kernel: ima: No architecture policies found Oct 2 19:00:33.762213 kernel: Freeing unused kernel memory: 34560K Oct 2 19:00:33.762220 kernel: Run /init as init process Oct 2 19:00:33.762228 kernel: with arguments: Oct 2 19:00:33.762234 kernel: /init Oct 2 19:00:33.762240 kernel: with environment: Oct 2 19:00:33.762246 kernel: HOME=/ Oct 2 19:00:33.762253 kernel: TERM=linux Oct 2 19:00:33.762259 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:00:33.762268 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:00:33.762276 systemd[1]: Detected virtualization kvm. Oct 2 19:00:33.762285 systemd[1]: Detected architecture arm64. Oct 2 19:00:33.762292 systemd[1]: Running in initrd. Oct 2 19:00:33.762299 systemd[1]: No hostname configured, using default hostname. Oct 2 19:00:33.762305 systemd[1]: Hostname set to . Oct 2 19:00:33.762318 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:00:33.762325 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:00:33.762332 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:00:33.762338 systemd[1]: Reached target cryptsetup.target. Oct 2 19:00:33.762347 systemd[1]: Reached target paths.target. Oct 2 19:00:33.762354 systemd[1]: Reached target slices.target. Oct 2 19:00:33.762361 systemd[1]: Reached target swap.target. Oct 2 19:00:33.762368 systemd[1]: Reached target timers.target. Oct 2 19:00:33.762375 systemd[1]: Listening on iscsid.socket. Oct 2 19:00:33.762382 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:00:33.762390 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:00:33.762398 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:00:33.762405 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:00:33.762412 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:00:33.762419 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:00:33.762426 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:00:33.762433 systemd[1]: Reached target sockets.target. Oct 2 19:00:33.762440 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:00:33.762447 systemd[1]: Finished network-cleanup.service. Oct 2 19:00:33.762454 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:00:33.762462 systemd[1]: Starting systemd-journald.service... Oct 2 19:00:33.762469 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:00:33.762476 systemd[1]: Starting systemd-resolved.service... Oct 2 19:00:33.762483 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:00:33.762490 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:00:33.762497 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:00:33.762504 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:00:33.762511 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:00:33.762518 kernel: audit: type=1130 audit(1696273233.759:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:33.762526 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:00:33.762537 systemd-journald[290]: Journal started Oct 2 19:00:33.762576 systemd-journald[290]: Runtime Journal (/run/log/journal/b0314741371c41448dd2a97875a082fc) is 6.0M, max 48.7M, 42.6M free. Oct 2 19:00:33.759000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:33.753010 systemd-modules-load[291]: Inserted module 'overlay' Oct 2 19:00:33.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:33.768975 kernel: audit: type=1130 audit(1696273233.764:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:33.769006 systemd[1]: Started systemd-journald.service. Oct 2 19:00:33.769000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:33.771031 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:00:33.785864 kernel: audit: type=1130 audit(1696273233.769:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:33.785887 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:00:33.785903 kernel: Bridge firewalling registered Oct 2 19:00:33.779422 systemd-modules-load[291]: Inserted module 'br_netfilter' Oct 2 19:00:33.783897 systemd-resolved[292]: Positive Trust Anchors: Oct 2 19:00:33.783904 systemd-resolved[292]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:00:33.783930 systemd-resolved[292]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:00:33.800725 kernel: audit: type=1130 audit(1696273233.790:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:33.790000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:33.788384 systemd-resolved[292]: Defaulting to hostname 'linux'. Oct 2 19:00:33.789223 systemd[1]: Started systemd-resolved.service. Oct 2 19:00:33.790378 systemd[1]: Reached target nss-lookup.target. Oct 2 19:00:33.804988 kernel: SCSI subsystem initialized Oct 2 19:00:33.812390 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:00:33.817555 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:00:33.817578 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:00:33.817595 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:00:33.817604 kernel: audit: type=1130 audit(1696273233.814:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:33.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:33.817771 systemd-modules-load[291]: Inserted module 'dm_multipath' Oct 2 19:00:33.818441 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:00:33.819587 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:00:33.819000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:33.823992 kernel: audit: type=1130 audit(1696273233.819:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:33.824609 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:00:33.829781 dracut-cmdline[313]: dracut-dracut-053 Oct 2 19:00:33.832704 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:00:33.832000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:33.836586 dracut-cmdline[313]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:00:33.840914 kernel: audit: type=1130 audit(1696273233.832:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:33.901979 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:00:33.909998 kernel: iscsi: registered transport (tcp) Oct 2 19:00:33.929153 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:00:33.929201 kernel: QLogic iSCSI HBA Driver Oct 2 19:00:33.971110 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:00:33.972824 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:00:33.970000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:33.977006 kernel: audit: type=1130 audit(1696273233.970:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:34.021990 kernel: raid6: neonx8 gen() 13721 MB/s Oct 2 19:00:34.039154 kernel: raid6: neonx8 xor() 10812 MB/s Oct 2 19:00:34.055994 kernel: raid6: neonx4 gen() 13517 MB/s Oct 2 19:00:34.073005 kernel: raid6: neonx4 xor() 11222 MB/s Oct 2 19:00:34.089989 kernel: raid6: neonx2 gen() 12960 MB/s Oct 2 19:00:34.106997 kernel: raid6: neonx2 xor() 10234 MB/s Oct 2 19:00:34.123997 kernel: raid6: neonx1 gen() 10502 MB/s Oct 2 19:00:34.141012 kernel: raid6: neonx1 xor() 8780 MB/s Oct 2 19:00:34.157996 kernel: raid6: int64x8 gen() 6279 MB/s Oct 2 19:00:34.175000 kernel: raid6: int64x8 xor() 3542 MB/s Oct 2 19:00:34.191991 kernel: raid6: int64x4 gen() 7237 MB/s Oct 2 19:00:34.208987 kernel: raid6: int64x4 xor() 3852 MB/s Oct 2 19:00:34.225988 kernel: raid6: int64x2 gen() 6146 MB/s Oct 2 19:00:34.242990 kernel: raid6: int64x2 xor() 3318 MB/s Oct 2 19:00:34.259989 kernel: raid6: int64x1 gen() 5039 MB/s Oct 2 19:00:34.277087 kernel: raid6: int64x1 xor() 2640 MB/s Oct 2 19:00:34.277130 kernel: raid6: using algorithm neonx8 gen() 13721 MB/s Oct 2 19:00:34.277149 kernel: raid6: .... xor() 10812 MB/s, rmw enabled Oct 2 19:00:34.278147 kernel: raid6: using neon recovery algorithm Oct 2 19:00:34.287977 kernel: xor: measuring software checksum speed Oct 2 19:00:34.289975 kernel: 8regs : 17293 MB/sec Oct 2 19:00:34.289989 kernel: 32regs : 20739 MB/sec Oct 2 19:00:34.291434 kernel: arm64_neon : 27892 MB/sec Oct 2 19:00:34.291446 kernel: xor: using function: arm64_neon (27892 MB/sec) Oct 2 19:00:34.349991 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 19:00:34.365823 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:00:34.366000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:34.373354 kernel: audit: type=1130 audit(1696273234.366:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:34.369000 audit: BPF prog-id=7 op=LOAD Oct 2 19:00:34.372000 audit: BPF prog-id=8 op=LOAD Oct 2 19:00:34.374764 systemd[1]: Starting systemd-udevd.service... Oct 2 19:00:34.389818 systemd-udevd[492]: Using default interface naming scheme 'v252'. Oct 2 19:00:34.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:34.393176 systemd[1]: Started systemd-udevd.service. Oct 2 19:00:34.395364 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:00:34.418939 dracut-pre-trigger[500]: rd.md=0: removing MD RAID activation Oct 2 19:00:34.456307 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:00:34.457000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:34.457976 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:00:34.494974 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:00:34.494000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:34.547381 kernel: virtio_blk virtio1: [vda] 9289728 512-byte logical blocks (4.76 GB/4.43 GiB) Oct 2 19:00:34.565988 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:00:34.579390 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:00:34.580491 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:00:34.585170 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:00:34.588121 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (560) Oct 2 19:00:34.593558 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:00:34.595488 systemd[1]: Starting disk-uuid.service... Oct 2 19:00:34.602109 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:00:34.605118 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:00:35.620985 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:00:35.621487 disk-uuid[570]: The operation has completed successfully. Oct 2 19:00:35.655903 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:00:35.657119 systemd[1]: Finished disk-uuid.service. Oct 2 19:00:35.658000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:35.658000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:35.659217 systemd[1]: Starting verity-setup.service... Oct 2 19:00:35.690371 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 19:00:35.725169 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:00:35.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:35.731702 systemd[1]: Finished verity-setup.service. Oct 2 19:00:35.734681 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:00:35.791348 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:00:35.789632 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:00:35.790595 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:00:35.793753 systemd[1]: Starting ignition-setup.service... Oct 2 19:00:35.796431 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:00:35.811234 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:00:35.811286 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:00:35.813047 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:00:35.825679 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:00:35.835532 systemd[1]: Finished ignition-setup.service. Oct 2 19:00:35.836000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:35.837337 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:00:35.940016 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:00:35.940000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:35.941000 audit: BPF prog-id=9 op=LOAD Oct 2 19:00:35.942856 systemd[1]: Starting systemd-networkd.service... Oct 2 19:00:35.975224 ignition[653]: Ignition 2.14.0 Oct 2 19:00:35.975234 ignition[653]: Stage: fetch-offline Oct 2 19:00:35.975272 ignition[653]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:00:35.975281 ignition[653]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:00:35.975428 ignition[653]: parsed url from cmdline: "" Oct 2 19:00:35.979265 systemd-networkd[743]: lo: Link UP Oct 2 19:00:35.975431 ignition[653]: no config URL provided Oct 2 19:00:35.981000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:35.979268 systemd-networkd[743]: lo: Gained carrier Oct 2 19:00:35.975435 ignition[653]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:00:35.979786 systemd-networkd[743]: Enumeration completed Oct 2 19:00:35.975442 ignition[653]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:00:35.980052 systemd[1]: Started systemd-networkd.service. Oct 2 19:00:35.975459 ignition[653]: op(1): [started] loading QEMU firmware config module Oct 2 19:00:35.981504 systemd[1]: Reached target network.target. Oct 2 19:00:35.975464 ignition[653]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 2 19:00:35.982600 systemd-networkd[743]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:00:35.983358 ignition[653]: op(1): [finished] loading QEMU firmware config module Oct 2 19:00:35.983803 systemd-networkd[743]: eth0: Link UP Oct 2 19:00:35.983630 ignition[653]: QEMU firmware config was not found. Ignoring... Oct 2 19:00:35.983807 systemd-networkd[743]: eth0: Gained carrier Oct 2 19:00:35.984532 systemd[1]: Starting iscsiuio.service... Oct 2 19:00:35.997702 systemd[1]: Started iscsiuio.service. Oct 2 19:00:35.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:35.999274 systemd[1]: Starting iscsid.service... Oct 2 19:00:36.003419 iscsid[750]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:00:36.003419 iscsid[750]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:00:36.003419 iscsid[750]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:00:36.003419 iscsid[750]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:00:36.003419 iscsid[750]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:00:36.003419 iscsid[750]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:00:36.010000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:36.004851 systemd-networkd[743]: eth0: DHCPv4 address 10.0.0.82/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:00:36.007799 systemd[1]: Started iscsid.service. Oct 2 19:00:36.011733 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:00:36.021753 ignition[653]: parsing config with SHA512: ee13d96993f5f5876ad4a2cf88cf57675059ac084c2e92f2da7b7bd5055777eafb06977413351ca0377c67d8574e1d63674b6ce94e90690f8956a9558f3b401d Oct 2 19:00:36.024921 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:00:36.025000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:36.026329 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:00:36.028678 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:00:36.029655 systemd[1]: Reached target remote-fs.target. Oct 2 19:00:36.032464 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:00:36.041549 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:00:36.042000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:36.043491 unknown[653]: fetched base config from "system" Oct 2 19:00:36.043501 unknown[653]: fetched user config from "qemu" Oct 2 19:00:36.043866 ignition[653]: fetch-offline: fetch-offline passed Oct 2 19:00:36.046000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:36.045375 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:00:36.043924 ignition[653]: Ignition finished successfully Oct 2 19:00:36.046913 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 2 19:00:36.047667 systemd[1]: Starting ignition-kargs.service... Oct 2 19:00:36.058203 ignition[766]: Ignition 2.14.0 Oct 2 19:00:36.058211 ignition[766]: Stage: kargs Oct 2 19:00:36.058310 ignition[766]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:00:36.060512 systemd[1]: Finished ignition-kargs.service. Oct 2 19:00:36.061000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:36.058320 ignition[766]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:00:36.059271 ignition[766]: kargs: kargs passed Oct 2 19:00:36.062838 systemd[1]: Starting ignition-disks.service... Oct 2 19:00:36.059326 ignition[766]: Ignition finished successfully Oct 2 19:00:36.070802 ignition[772]: Ignition 2.14.0 Oct 2 19:00:36.070812 ignition[772]: Stage: disks Oct 2 19:00:36.070906 ignition[772]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:00:36.072989 systemd[1]: Finished ignition-disks.service. Oct 2 19:00:36.074000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:36.070916 ignition[772]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:00:36.074595 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:00:36.071744 ignition[772]: disks: disks passed Oct 2 19:00:36.075933 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:00:36.071789 ignition[772]: Ignition finished successfully Oct 2 19:00:36.077683 systemd[1]: Reached target local-fs.target. Oct 2 19:00:36.079141 systemd[1]: Reached target sysinit.target. Oct 2 19:00:36.080358 systemd[1]: Reached target basic.target. Oct 2 19:00:36.082691 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:00:36.094860 systemd-fsck[780]: ROOT: clean, 603/553520 files, 56011/553472 blocks Oct 2 19:00:36.100526 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:00:36.101000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:36.103023 systemd[1]: Mounting sysroot.mount... Oct 2 19:00:36.109967 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:00:36.110543 systemd[1]: Mounted sysroot.mount. Oct 2 19:00:36.111317 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:00:36.113584 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:00:36.114479 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:00:36.114516 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:00:36.114541 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:00:36.116903 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:00:36.119928 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:00:36.125616 initrd-setup-root[790]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:00:36.129741 initrd-setup-root[798]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:00:36.135263 initrd-setup-root[806]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:00:36.139461 initrd-setup-root[814]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:00:36.180053 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:00:36.179000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:36.181716 systemd[1]: Starting ignition-mount.service... Oct 2 19:00:36.183103 systemd[1]: Starting sysroot-boot.service... Oct 2 19:00:36.188931 bash[831]: umount: /sysroot/usr/share/oem: not mounted. Oct 2 19:00:36.199698 ignition[833]: INFO : Ignition 2.14.0 Oct 2 19:00:36.200720 ignition[833]: INFO : Stage: mount Oct 2 19:00:36.201588 ignition[833]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:00:36.202614 ignition[833]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:00:36.204537 systemd[1]: Finished sysroot-boot.service. Oct 2 19:00:36.205000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:36.206027 ignition[833]: INFO : mount: mount passed Oct 2 19:00:36.206027 ignition[833]: INFO : Ignition finished successfully Oct 2 19:00:36.207000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:36.206624 systemd[1]: Finished ignition-mount.service. Oct 2 19:00:36.743732 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:00:36.761993 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (842) Oct 2 19:00:36.764520 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:00:36.764552 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:00:36.764562 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:00:36.771204 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:00:36.772909 systemd[1]: Starting ignition-files.service... Oct 2 19:00:36.790017 ignition[862]: INFO : Ignition 2.14.0 Oct 2 19:00:36.790017 ignition[862]: INFO : Stage: files Oct 2 19:00:36.791748 ignition[862]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:00:36.791748 ignition[862]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:00:36.791748 ignition[862]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:00:36.795750 ignition[862]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:00:36.795750 ignition[862]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:00:36.799531 ignition[862]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:00:36.800940 ignition[862]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:00:36.800940 ignition[862]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:00:36.800940 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 19:00:36.800940 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-arm64-v1.1.1.tgz: attempt #1 Oct 2 19:00:36.800333 unknown[862]: wrote ssh authorized keys file for user: core Oct 2 19:00:37.057195 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:00:37.086062 systemd-networkd[743]: eth0: Gained IPv6LL Oct 2 19:00:37.252761 ignition[862]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 6b5df61a53601926e4b5a9174828123d555f592165439f541bc117c68781f41c8bd30dccd52367e406d104df849bcbcfb72d9c4bafda4b045c59ce95d0ca0742 Oct 2 19:00:37.255668 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 19:00:37.255668 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.24.2-linux-arm64.tar.gz" Oct 2 19:00:37.255668 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.24.2/crictl-v1.24.2-linux-arm64.tar.gz: attempt #1 Oct 2 19:00:37.421225 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:00:37.499294 ignition[862]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: ebd055e9b2888624d006decd582db742131ed815d059d529ba21eaf864becca98a84b20a10eec91051b9d837c6855d28d5042bf5e9a454f4540aec6b82d37e96 Oct 2 19:00:37.502313 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.24.2-linux-arm64.tar.gz" Oct 2 19:00:37.502313 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:00:37.502313 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.25.10/bin/linux/arm64/kubeadm: attempt #1 Oct 2 19:00:37.543525 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:00:37.815981 ignition[862]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: daab8965a4f617d1570d04c031ab4d55fff6aa13a61f0e4045f2338947f9fb0ee3a80fdee57cfe86db885390595460342181e1ec52b89f127ef09c393ae3db7f Oct 2 19:00:37.815981 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:00:37.820739 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:00:37.820739 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.25.10/bin/linux/arm64/kubelet: attempt #1 Oct 2 19:00:37.868601 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:00:38.515653 ignition[862]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 7b872a34d86e8aa75455a62a20f5cf16426de2ae54ffb8e0250fead920838df818201b8512c2f8bf4c939e5b21babab371f3a48803e2e861da9e6f8cdd022324 Oct 2 19:00:38.519037 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:00:38.519037 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:00:38.519037 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:00:38.519037 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:00:38.519037 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:00:38.519037 ignition[862]: INFO : files: op(9): [started] processing unit "prepare-critools.service" Oct 2 19:00:38.519037 ignition[862]: INFO : files: op(9): op(a): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:00:38.519037 ignition[862]: INFO : files: op(9): op(a): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:00:38.519037 ignition[862]: INFO : files: op(9): [finished] processing unit "prepare-critools.service" Oct 2 19:00:38.519037 ignition[862]: INFO : files: op(b): [started] processing unit "coreos-metadata.service" Oct 2 19:00:38.519037 ignition[862]: INFO : files: op(b): op(c): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:00:38.519037 ignition[862]: INFO : files: op(b): op(c): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:00:38.519037 ignition[862]: INFO : files: op(b): [finished] processing unit "coreos-metadata.service" Oct 2 19:00:38.519037 ignition[862]: INFO : files: op(d): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:00:38.519037 ignition[862]: INFO : files: op(d): op(e): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:00:38.519037 ignition[862]: INFO : files: op(d): op(e): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:00:38.519037 ignition[862]: INFO : files: op(d): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:00:38.519037 ignition[862]: INFO : files: op(f): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:00:38.551839 ignition[862]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:00:38.551839 ignition[862]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Oct 2 19:00:38.551839 ignition[862]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:00:38.557599 ignition[862]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:00:38.557599 ignition[862]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Oct 2 19:00:38.557599 ignition[862]: INFO : files: op(12): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:00:38.557599 ignition[862]: INFO : files: op(12): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:00:38.557599 ignition[862]: INFO : files: createResultFile: createFiles: op(13): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:00:38.557599 ignition[862]: INFO : files: createResultFile: createFiles: op(13): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:00:38.557599 ignition[862]: INFO : files: files passed Oct 2 19:00:38.557599 ignition[862]: INFO : Ignition finished successfully Oct 2 19:00:38.583104 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:00:38.583127 kernel: audit: type=1130 audit(1696273238.559:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.583143 kernel: audit: type=1130 audit(1696273238.571:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.583160 kernel: audit: type=1131 audit(1696273238.571:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.583169 kernel: audit: type=1130 audit(1696273238.578:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.559000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.571000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.571000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.578000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.557675 systemd[1]: Finished ignition-files.service. Oct 2 19:00:38.563144 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:00:38.585730 initrd-setup-root-after-ignition[888]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 2 19:00:38.565870 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:00:38.590145 initrd-setup-root-after-ignition[890]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:00:38.566671 systemd[1]: Starting ignition-quench.service... Oct 2 19:00:38.570253 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:00:38.570417 systemd[1]: Finished ignition-quench.service. Oct 2 19:00:38.573830 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:00:38.580020 systemd[1]: Reached target ignition-complete.target. Oct 2 19:00:38.584683 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:00:38.600931 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:00:38.601075 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:00:38.608206 kernel: audit: type=1130 audit(1696273238.601:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.608230 kernel: audit: type=1131 audit(1696273238.601:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.601000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.601000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.602976 systemd[1]: Reached target initrd-fs.target. Oct 2 19:00:38.608918 systemd[1]: Reached target initrd.target. Oct 2 19:00:38.610411 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:00:38.611233 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:00:38.623629 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:00:38.624000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.625364 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:00:38.629012 kernel: audit: type=1130 audit(1696273238.624:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.634512 systemd[1]: Stopped target network.target. Oct 2 19:00:38.635393 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:00:38.636843 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:00:38.638451 systemd[1]: Stopped target timers.target. Oct 2 19:00:38.639752 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:00:38.640000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.639862 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:00:38.645555 kernel: audit: type=1131 audit(1696273238.640:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.641202 systemd[1]: Stopped target initrd.target. Oct 2 19:00:38.645014 systemd[1]: Stopped target basic.target. Oct 2 19:00:38.646328 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:00:38.647745 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:00:38.649149 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:00:38.650719 systemd[1]: Stopped target remote-fs.target. Oct 2 19:00:38.652146 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:00:38.653606 systemd[1]: Stopped target sysinit.target. Oct 2 19:00:38.654925 systemd[1]: Stopped target local-fs.target. Oct 2 19:00:38.656302 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:00:38.657617 systemd[1]: Stopped target swap.target. Oct 2 19:00:38.663006 kernel: audit: type=1131 audit(1696273238.660:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.660000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.658825 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:00:38.658944 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:00:38.665000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.660317 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:00:38.669868 kernel: audit: type=1131 audit(1696273238.665:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.669000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.663797 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:00:38.663905 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:00:38.665539 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:00:38.665636 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:00:38.669372 systemd[1]: Stopped target paths.target. Oct 2 19:00:38.670581 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:00:38.674987 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:00:38.676531 systemd[1]: Stopped target slices.target. Oct 2 19:00:38.677874 systemd[1]: Stopped target sockets.target. Oct 2 19:00:38.679116 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:00:38.679189 systemd[1]: Closed iscsid.socket. Oct 2 19:00:38.680276 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:00:38.681000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.680349 systemd[1]: Closed iscsiuio.socket. Oct 2 19:00:38.684000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.681606 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:00:38.681705 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:00:38.683019 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:00:38.688000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.683108 systemd[1]: Stopped ignition-files.service. Oct 2 19:00:38.685259 systemd[1]: Stopping ignition-mount.service... Oct 2 19:00:38.686667 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:00:38.686799 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:00:38.693000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.694700 ignition[903]: INFO : Ignition 2.14.0 Oct 2 19:00:38.694700 ignition[903]: INFO : Stage: umount Oct 2 19:00:38.694700 ignition[903]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:00:38.694700 ignition[903]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:00:38.695000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.689075 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:00:38.699000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.699000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.700441 ignition[903]: INFO : umount: umount passed Oct 2 19:00:38.700441 ignition[903]: INFO : Ignition finished successfully Oct 2 19:00:38.700000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.701000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.690001 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:00:38.705000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.691280 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:00:38.705000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.692483 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:00:38.708000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.692606 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:00:38.694192 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:00:38.711000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.694285 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:00:38.713000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.698050 systemd-networkd[743]: eth0: DHCPv6 lease lost Oct 2 19:00:38.714000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:00:38.714000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.698145 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:00:38.698229 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:00:38.699903 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:00:38.699997 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:00:38.721000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.701408 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:00:38.701482 systemd[1]: Stopped ignition-mount.service. Oct 2 19:00:38.702388 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:00:38.702415 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:00:38.703774 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:00:38.726000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:00:38.726000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.703813 systemd[1]: Stopped ignition-disks.service. Oct 2 19:00:38.705363 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:00:38.731000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.705403 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:00:38.733000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.706890 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:00:38.734000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.706927 systemd[1]: Stopped ignition-setup.service. Oct 2 19:00:38.709105 systemd[1]: Stopping network-cleanup.service... Oct 2 19:00:38.709924 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:00:38.738000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.710000 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:00:38.741000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.711698 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:00:38.711742 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:00:38.744000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.744000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.714680 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:00:38.714723 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:00:38.719008 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:00:38.721233 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:00:38.721320 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:00:38.721863 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:00:38.722044 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:00:38.726111 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:00:38.726265 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:00:38.727513 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:00:38.727547 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:00:38.728708 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:00:38.728741 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:00:38.730316 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:00:38.730360 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:00:38.732377 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:00:38.732419 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:00:38.733917 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:00:38.733974 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:00:38.736422 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:00:38.738303 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:00:38.738364 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:00:38.740161 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:00:38.740260 systemd[1]: Stopped network-cleanup.service. Oct 2 19:00:38.743107 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:00:38.743197 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:00:38.778072 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:00:38.779010 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:00:38.779872 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:00:38.781173 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:00:38.778000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.782000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:38.781223 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:00:38.783377 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:00:38.790777 systemd[1]: Switching root. Oct 2 19:00:38.810657 iscsid[750]: iscsid shutting down. Oct 2 19:00:38.811364 systemd-journald[290]: Received SIGTERM from PID 1 (systemd). Oct 2 19:00:38.811410 systemd-journald[290]: Journal stopped Oct 2 19:00:40.930605 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:00:40.930696 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:00:40.930708 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:00:40.930729 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:00:40.930742 kernel: SELinux: policy capability open_perms=1 Oct 2 19:00:40.930752 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:00:40.930772 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:00:40.930791 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:00:40.930801 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:00:40.930811 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:00:40.930820 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:00:40.930832 systemd[1]: Successfully loaded SELinux policy in 35.181ms. Oct 2 19:00:40.930863 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 10.897ms. Oct 2 19:00:40.930877 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:00:40.930889 systemd[1]: Detected virtualization kvm. Oct 2 19:00:40.930899 systemd[1]: Detected architecture arm64. Oct 2 19:00:40.930912 systemd[1]: Detected first boot. Oct 2 19:00:40.930922 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:00:40.930933 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:00:40.930944 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:00:40.930968 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:00:40.930981 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:00:40.930995 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:00:40.931006 systemd[1]: Stopped iscsiuio.service. Oct 2 19:00:40.931017 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:00:40.931028 systemd[1]: Stopped iscsid.service. Oct 2 19:00:40.931038 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:00:40.931049 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:00:40.931060 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:00:40.931071 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:00:40.931082 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:00:40.931093 systemd[1]: Created slice system-getty.slice. Oct 2 19:00:40.931103 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:00:40.931116 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:00:40.931126 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:00:40.931137 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:00:40.931148 systemd[1]: Created slice user.slice. Oct 2 19:00:40.931160 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:00:40.931172 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:00:40.931182 systemd[1]: Set up automount boot.automount. Oct 2 19:00:40.931194 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:00:40.931205 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:00:40.931216 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:00:40.931226 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:00:40.931237 systemd[1]: Reached target integritysetup.target. Oct 2 19:00:40.931247 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:00:40.931258 systemd[1]: Reached target remote-fs.target. Oct 2 19:00:40.931268 systemd[1]: Reached target slices.target. Oct 2 19:00:40.931279 systemd[1]: Reached target swap.target. Oct 2 19:00:40.931296 systemd[1]: Reached target torcx.target. Oct 2 19:00:40.931308 systemd[1]: Reached target veritysetup.target. Oct 2 19:00:40.931318 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:00:40.931329 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:00:40.931340 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:00:40.931350 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:00:40.931361 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:00:40.931371 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:00:40.931382 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:00:40.931394 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:00:40.931407 systemd[1]: Mounting media.mount... Oct 2 19:00:40.931418 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:00:40.931429 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:00:40.931440 systemd[1]: Mounting tmp.mount... Oct 2 19:00:40.931452 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:00:40.931464 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:00:40.931475 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:00:40.931487 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:00:40.931497 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:00:40.931509 systemd[1]: Starting modprobe@drm.service... Oct 2 19:00:40.931530 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:00:40.931541 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:00:40.931551 systemd[1]: Starting modprobe@loop.service... Oct 2 19:00:40.931562 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:00:40.931573 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:00:40.931584 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:00:40.931595 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:00:40.931605 kernel: fuse: init (API version 7.34) Oct 2 19:00:40.931616 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:00:40.931627 systemd[1]: Stopped systemd-journald.service. Oct 2 19:00:40.931638 systemd[1]: Starting systemd-journald.service... Oct 2 19:00:40.931649 kernel: loop: module loaded Oct 2 19:00:40.931660 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:00:40.931670 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:00:40.931680 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:00:40.931691 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:00:40.931702 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:00:40.931713 systemd[1]: Stopped verity-setup.service. Oct 2 19:00:40.931724 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:00:40.931734 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:00:40.931744 systemd[1]: Mounted media.mount. Oct 2 19:00:40.931754 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:00:40.931765 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:00:40.931775 systemd[1]: Mounted tmp.mount. Oct 2 19:00:40.931785 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:00:40.931799 systemd-journald[999]: Journal started Oct 2 19:00:40.931841 systemd-journald[999]: Runtime Journal (/run/log/journal/b0314741371c41448dd2a97875a082fc) is 6.0M, max 48.7M, 42.6M free. Oct 2 19:00:38.872000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:00:39.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:00:39.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:00:39.023000 audit: BPF prog-id=10 op=LOAD Oct 2 19:00:39.023000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:00:39.023000 audit: BPF prog-id=11 op=LOAD Oct 2 19:00:39.023000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:00:40.795000 audit: BPF prog-id=12 op=LOAD Oct 2 19:00:40.795000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:00:40.795000 audit: BPF prog-id=13 op=LOAD Oct 2 19:00:40.795000 audit: BPF prog-id=14 op=LOAD Oct 2 19:00:40.795000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:00:40.795000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:00:40.797000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.800000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.803000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.806000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.807000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:00:40.896000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.899000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.899000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.899000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.900000 audit: BPF prog-id=15 op=LOAD Oct 2 19:00:40.900000 audit: BPF prog-id=16 op=LOAD Oct 2 19:00:40.900000 audit: BPF prog-id=17 op=LOAD Oct 2 19:00:40.900000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:00:40.901000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:00:40.919000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.926000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:00:40.926000 audit[999]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=6 a1=ffffec0a5ff0 a2=4000 a3=1 items=0 ppid=1 pid=999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:40.926000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:00:40.931000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.794755 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:00:39.080019 /usr/lib/systemd/system-generators/torcx-generator[937]: time="2023-10-02T19:00:39Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:00:40.794767 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 19:00:39.080663 /usr/lib/systemd/system-generators/torcx-generator[937]: time="2023-10-02T19:00:39Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:00:40.798119 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:00:39.080691 /usr/lib/systemd/system-generators/torcx-generator[937]: time="2023-10-02T19:00:39Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:00:39.080723 /usr/lib/systemd/system-generators/torcx-generator[937]: time="2023-10-02T19:00:39Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:00:39.080733 /usr/lib/systemd/system-generators/torcx-generator[937]: time="2023-10-02T19:00:39Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:00:39.080762 /usr/lib/systemd/system-generators/torcx-generator[937]: time="2023-10-02T19:00:39Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:00:39.080774 /usr/lib/systemd/system-generators/torcx-generator[937]: time="2023-10-02T19:00:39Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:00:40.933373 systemd[1]: Started systemd-journald.service. Oct 2 19:00:39.080995 /usr/lib/systemd/system-generators/torcx-generator[937]: time="2023-10-02T19:00:39Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:00:39.081031 /usr/lib/systemd/system-generators/torcx-generator[937]: time="2023-10-02T19:00:39Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:00:40.933000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:39.081043 /usr/lib/systemd/system-generators/torcx-generator[937]: time="2023-10-02T19:00:39Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:00:39.081587 /usr/lib/systemd/system-generators/torcx-generator[937]: time="2023-10-02T19:00:39Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:00:39.081618 /usr/lib/systemd/system-generators/torcx-generator[937]: time="2023-10-02T19:00:39Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:00:39.081637 /usr/lib/systemd/system-generators/torcx-generator[937]: time="2023-10-02T19:00:39Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:00:39.081650 /usr/lib/systemd/system-generators/torcx-generator[937]: time="2023-10-02T19:00:39Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:00:39.081666 /usr/lib/systemd/system-generators/torcx-generator[937]: time="2023-10-02T19:00:39Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:00:40.933942 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:00:39.081680 /usr/lib/systemd/system-generators/torcx-generator[937]: time="2023-10-02T19:00:39Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:00:40.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.935000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.934419 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:00:40.538249 /usr/lib/systemd/system-generators/torcx-generator[937]: time="2023-10-02T19:00:40Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:00:40.538528 /usr/lib/systemd/system-generators/torcx-generator[937]: time="2023-10-02T19:00:40Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:00:40.538623 /usr/lib/systemd/system-generators/torcx-generator[937]: time="2023-10-02T19:00:40Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:00:40.538810 /usr/lib/systemd/system-generators/torcx-generator[937]: time="2023-10-02T19:00:40Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:00:40.538860 /usr/lib/systemd/system-generators/torcx-generator[937]: time="2023-10-02T19:00:40Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:00:40.538917 /usr/lib/systemd/system-generators/torcx-generator[937]: time="2023-10-02T19:00:40Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:00:40.935621 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:00:40.935779 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:00:40.936000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.936000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.936889 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:00:40.937141 systemd[1]: Finished modprobe@drm.service. Oct 2 19:00:40.936000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.936000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.938162 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:00:40.939147 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:00:40.940211 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:00:40.940362 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:00:40.938000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.938000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.940000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.940000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.941393 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:00:40.941546 systemd[1]: Finished modprobe@loop.service. Oct 2 19:00:40.941000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.941000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.942593 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:00:40.942000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.943726 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:00:40.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.944897 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:00:40.944000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.946182 systemd[1]: Reached target network-pre.target. Oct 2 19:00:40.948150 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:00:40.949952 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:00:40.950938 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:00:40.952937 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:00:40.954771 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:00:40.956238 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:00:40.957180 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:00:40.958007 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:00:40.959948 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:00:40.962506 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:00:40.963573 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:00:40.964671 systemd-journald[999]: Time spent on flushing to /var/log/journal/b0314741371c41448dd2a97875a082fc is 20.017ms for 975 entries. Oct 2 19:00:40.964671 systemd-journald[999]: System Journal (/var/log/journal/b0314741371c41448dd2a97875a082fc) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:00:40.999370 systemd-journald[999]: Received client request to flush runtime journal. Oct 2 19:00:40.971000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.973000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.981000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:40.971514 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:00:40.972784 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:00:40.974131 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:00:41.000071 udevadm[1038]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 19:00:40.975079 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:00:40.977218 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:00:40.979225 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:00:40.981539 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:00:40.998144 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:00:41.000385 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:00:41.000000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:41.343021 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:00:41.342000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:41.345000 audit: BPF prog-id=18 op=LOAD Oct 2 19:00:41.345000 audit: BPF prog-id=19 op=LOAD Oct 2 19:00:41.345000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:00:41.345000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:00:41.346441 systemd[1]: Starting systemd-udevd.service... Oct 2 19:00:41.367623 systemd-udevd[1040]: Using default interface naming scheme 'v252'. Oct 2 19:00:41.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:41.407000 audit: BPF prog-id=20 op=LOAD Oct 2 19:00:41.406396 systemd[1]: Started systemd-udevd.service. Oct 2 19:00:41.409464 systemd[1]: Starting systemd-networkd.service... Oct 2 19:00:41.416000 audit: BPF prog-id=21 op=LOAD Oct 2 19:00:41.416000 audit: BPF prog-id=22 op=LOAD Oct 2 19:00:41.416000 audit: BPF prog-id=23 op=LOAD Oct 2 19:00:41.417823 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:00:41.431024 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Oct 2 19:00:41.456416 systemd[1]: Started systemd-userdbd.service. Oct 2 19:00:41.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:41.483024 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:00:41.535332 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:00:41.535000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:41.537441 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:00:41.543134 systemd-networkd[1050]: lo: Link UP Oct 2 19:00:41.543427 systemd-networkd[1050]: lo: Gained carrier Oct 2 19:00:41.543892 systemd-networkd[1050]: Enumeration completed Oct 2 19:00:41.544092 systemd[1]: Started systemd-networkd.service. Oct 2 19:00:41.544208 systemd-networkd[1050]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:00:41.545000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:41.547424 systemd-networkd[1050]: eth0: Link UP Oct 2 19:00:41.547515 systemd-networkd[1050]: eth0: Gained carrier Oct 2 19:00:41.553399 lvm[1073]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:00:41.575107 systemd-networkd[1050]: eth0: DHCPv4 address 10.0.0.82/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:00:41.587008 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:00:41.586000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:41.588045 systemd[1]: Reached target cryptsetup.target. Oct 2 19:00:41.590032 systemd[1]: Starting lvm2-activation.service... Oct 2 19:00:41.596979 lvm[1074]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:00:41.624243 systemd[1]: Finished lvm2-activation.service. Oct 2 19:00:41.624000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:41.625252 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:00:41.626262 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:00:41.626302 systemd[1]: Reached target local-fs.target. Oct 2 19:00:41.627052 systemd[1]: Reached target machines.target. Oct 2 19:00:41.629026 systemd[1]: Starting ldconfig.service... Oct 2 19:00:41.630044 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:00:41.630111 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:00:41.631223 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:00:41.633383 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:00:41.637211 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:00:41.638199 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:00:41.638272 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:00:41.639331 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:00:41.644838 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1076 (bootctl) Oct 2 19:00:41.646191 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:00:41.658534 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:00:41.660000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:41.669537 systemd-tmpfiles[1079]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:00:41.682389 systemd-tmpfiles[1079]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:00:41.731594 systemd-tmpfiles[1079]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:00:41.736395 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:00:41.737034 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:00:41.738000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:41.759479 systemd-fsck[1085]: fsck.fat 4.2 (2021-01-31) Oct 2 19:00:41.759479 systemd-fsck[1085]: /dev/vda1: 236 files, 113463/258078 clusters Oct 2 19:00:41.761125 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:00:41.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:41.766306 systemd[1]: Mounting boot.mount... Oct 2 19:00:41.778559 systemd[1]: Mounted boot.mount. Oct 2 19:00:41.800889 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:00:41.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:41.873088 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:00:41.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:41.875811 systemd[1]: Starting audit-rules.service... Oct 2 19:00:41.877656 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:00:41.879930 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:00:41.885418 systemd[1]: Starting systemd-resolved.service... Oct 2 19:00:41.884000 audit: BPF prog-id=24 op=LOAD Oct 2 19:00:41.888000 audit: BPF prog-id=25 op=LOAD Oct 2 19:00:41.890023 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:00:41.890000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:41.891915 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:00:41.893235 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:00:41.894871 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:00:41.902000 audit[1099]: SYSTEM_BOOT pid=1099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:00:41.905988 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:00:41.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:41.918479 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:00:41.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:41.936000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:00:41.936000 audit[1108]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc1d70b60 a2=420 a3=0 items=0 ppid=1088 pid=1108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:41.936000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:00:41.938352 augenrules[1108]: No rules Oct 2 19:00:41.938898 systemd[1]: Finished audit-rules.service. Oct 2 19:00:41.955197 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:00:41.499986 systemd-timesyncd[1098]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 2 19:00:41.528080 systemd-journald[999]: Time jumped backwards, rotating. Oct 2 19:00:41.500041 systemd-timesyncd[1098]: Initial clock synchronization to Mon 2023-10-02 19:00:41.499894 UTC. Oct 2 19:00:41.503487 systemd[1]: Reached target time-set.target. Oct 2 19:00:41.509409 systemd-resolved[1092]: Positive Trust Anchors: Oct 2 19:00:41.509418 systemd-resolved[1092]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:00:41.509445 systemd-resolved[1092]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:00:41.539236 systemd-resolved[1092]: Defaulting to hostname 'linux'. Oct 2 19:00:41.541275 systemd[1]: Started systemd-resolved.service. Oct 2 19:00:41.542233 systemd[1]: Reached target network.target. Oct 2 19:00:41.543847 systemd[1]: Reached target nss-lookup.target. Oct 2 19:00:41.551571 ldconfig[1075]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:00:41.558211 systemd[1]: Finished ldconfig.service. Oct 2 19:00:41.560337 systemd[1]: Starting systemd-update-done.service... Oct 2 19:00:41.569715 systemd[1]: Finished systemd-update-done.service. Oct 2 19:00:41.572446 systemd[1]: Reached target sysinit.target. Oct 2 19:00:41.575357 systemd[1]: Started motdgen.path. Oct 2 19:00:41.576347 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:00:41.577677 systemd[1]: Started logrotate.timer. Oct 2 19:00:41.578562 systemd[1]: Started mdadm.timer. Oct 2 19:00:41.579251 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:00:41.580279 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:00:41.580315 systemd[1]: Reached target paths.target. Oct 2 19:00:41.581093 systemd[1]: Reached target timers.target. Oct 2 19:00:41.582453 systemd[1]: Listening on dbus.socket. Oct 2 19:00:41.584338 systemd[1]: Starting docker.socket... Oct 2 19:00:41.587888 systemd[1]: Listening on sshd.socket. Oct 2 19:00:41.588764 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:00:41.589237 systemd[1]: Listening on docker.socket. Oct 2 19:00:41.590105 systemd[1]: Reached target sockets.target. Oct 2 19:00:41.590896 systemd[1]: Reached target basic.target. Oct 2 19:00:41.591676 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:00:41.591705 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:00:41.592745 systemd[1]: Starting containerd.service... Oct 2 19:00:41.594681 systemd[1]: Starting dbus.service... Oct 2 19:00:41.597974 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:00:41.600291 systemd[1]: Starting extend-filesystems.service... Oct 2 19:00:41.601154 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:00:41.602347 systemd[1]: Starting motdgen.service... Oct 2 19:00:41.604803 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:00:41.606746 systemd[1]: Starting prepare-critools.service... Oct 2 19:00:41.608590 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:00:41.610574 systemd[1]: Starting sshd-keygen.service... Oct 2 19:00:41.615003 jq[1120]: false Oct 2 19:00:41.623817 systemd[1]: Starting systemd-logind.service... Oct 2 19:00:41.624673 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:00:41.624814 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:00:41.625402 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:00:41.626399 systemd[1]: Starting update-engine.service... Oct 2 19:00:41.628744 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:00:41.633733 jq[1140]: true Oct 2 19:00:41.634617 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:00:41.634797 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:00:41.636693 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:00:41.636915 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:00:41.637647 extend-filesystems[1121]: Found vda Oct 2 19:00:41.638654 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:00:41.638806 systemd[1]: Finished motdgen.service. Oct 2 19:00:41.643630 extend-filesystems[1121]: Found vda1 Oct 2 19:00:41.646359 tar[1142]: ./ Oct 2 19:00:41.646359 tar[1142]: ./macvlan Oct 2 19:00:41.646998 extend-filesystems[1121]: Found vda2 Oct 2 19:00:41.648058 tar[1143]: crictl Oct 2 19:00:41.648383 extend-filesystems[1121]: Found vda3 Oct 2 19:00:41.650180 extend-filesystems[1121]: Found usr Oct 2 19:00:41.653303 jq[1144]: true Oct 2 19:00:41.656461 extend-filesystems[1121]: Found vda4 Oct 2 19:00:41.657527 extend-filesystems[1121]: Found vda6 Oct 2 19:00:41.658700 extend-filesystems[1121]: Found vda7 Oct 2 19:00:41.658700 extend-filesystems[1121]: Found vda9 Oct 2 19:00:41.658700 extend-filesystems[1121]: Checking size of /dev/vda9 Oct 2 19:00:41.679840 extend-filesystems[1121]: Old size kept for /dev/vda9 Oct 2 19:00:41.681666 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:00:41.698386 dbus-daemon[1119]: [system] SELinux support is enabled Oct 2 19:00:41.698944 systemd[1]: Finished extend-filesystems.service. Oct 2 19:00:41.700076 systemd[1]: Started dbus.service. Oct 2 19:00:41.705428 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:00:41.705460 systemd[1]: Reached target system-config.target. Oct 2 19:00:41.706619 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:00:41.706641 systemd[1]: Reached target user-config.target. Oct 2 19:00:41.714422 bash[1170]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:00:41.715624 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:00:41.725515 tar[1142]: ./static Oct 2 19:00:41.731253 systemd-logind[1138]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 19:00:41.734237 systemd-logind[1138]: New seat seat0. Oct 2 19:00:41.739989 systemd[1]: Started systemd-logind.service. Oct 2 19:00:41.745278 update_engine[1139]: I1002 19:00:41.741860 1139 main.cc:92] Flatcar Update Engine starting Oct 2 19:00:41.747626 systemd[1]: Started update-engine.service. Oct 2 19:00:41.747717 update_engine[1139]: I1002 19:00:41.747697 1139 update_check_scheduler.cc:74] Next update check in 5m30s Oct 2 19:00:41.751949 systemd[1]: Started locksmithd.service. Oct 2 19:00:41.752940 tar[1142]: ./vlan Oct 2 19:00:41.787839 tar[1142]: ./portmap Oct 2 19:00:41.789110 env[1147]: time="2023-10-02T19:00:41.789059778Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:00:41.816062 env[1147]: time="2023-10-02T19:00:41.816004658Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:00:41.816201 env[1147]: time="2023-10-02T19:00:41.816179698Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:00:41.818372 tar[1142]: ./host-local Oct 2 19:00:41.818625 env[1147]: time="2023-10-02T19:00:41.818583258Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:00:41.818625 env[1147]: time="2023-10-02T19:00:41.818622538Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:00:41.818839 env[1147]: time="2023-10-02T19:00:41.818806898Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:00:41.818839 env[1147]: time="2023-10-02T19:00:41.818834818Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:00:41.818891 env[1147]: time="2023-10-02T19:00:41.818849378Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:00:41.818891 env[1147]: time="2023-10-02T19:00:41.818861218Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:00:41.818957 env[1147]: time="2023-10-02T19:00:41.818937898Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:00:41.819246 env[1147]: time="2023-10-02T19:00:41.819223618Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:00:41.819360 env[1147]: time="2023-10-02T19:00:41.819338618Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:00:41.819360 env[1147]: time="2023-10-02T19:00:41.819358058Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:00:41.819431 env[1147]: time="2023-10-02T19:00:41.819413418Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:00:41.819431 env[1147]: time="2023-10-02T19:00:41.819429538Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:00:41.824541 env[1147]: time="2023-10-02T19:00:41.824481738Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:00:41.824607 env[1147]: time="2023-10-02T19:00:41.824562498Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:00:41.824607 env[1147]: time="2023-10-02T19:00:41.824579298Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:00:41.824660 env[1147]: time="2023-10-02T19:00:41.824610978Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:00:41.824660 env[1147]: time="2023-10-02T19:00:41.824625778Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:00:41.824660 env[1147]: time="2023-10-02T19:00:41.824640418Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:00:41.824660 env[1147]: time="2023-10-02T19:00:41.824653658Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:00:41.825031 env[1147]: time="2023-10-02T19:00:41.825004178Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:00:41.825071 env[1147]: time="2023-10-02T19:00:41.825032018Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:00:41.825071 env[1147]: time="2023-10-02T19:00:41.825047458Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:00:41.825071 env[1147]: time="2023-10-02T19:00:41.825060458Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:00:41.825132 env[1147]: time="2023-10-02T19:00:41.825072658Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:00:41.825222 env[1147]: time="2023-10-02T19:00:41.825199298Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:00:41.825299 env[1147]: time="2023-10-02T19:00:41.825281938Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:00:41.825516 env[1147]: time="2023-10-02T19:00:41.825489458Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:00:41.825548 env[1147]: time="2023-10-02T19:00:41.825538338Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:00:41.825569 env[1147]: time="2023-10-02T19:00:41.825554138Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:00:41.825681 env[1147]: time="2023-10-02T19:00:41.825663098Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:00:41.825681 env[1147]: time="2023-10-02T19:00:41.825680378Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:00:41.825736 env[1147]: time="2023-10-02T19:00:41.825692618Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:00:41.825736 env[1147]: time="2023-10-02T19:00:41.825704698Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:00:41.825736 env[1147]: time="2023-10-02T19:00:41.825716138Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:00:41.825736 env[1147]: time="2023-10-02T19:00:41.825728818Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:00:41.825808 env[1147]: time="2023-10-02T19:00:41.825739738Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:00:41.825808 env[1147]: time="2023-10-02T19:00:41.825751218Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:00:41.825808 env[1147]: time="2023-10-02T19:00:41.825763858Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:00:41.825916 env[1147]: time="2023-10-02T19:00:41.825895218Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:00:41.825950 env[1147]: time="2023-10-02T19:00:41.825918098Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:00:41.825950 env[1147]: time="2023-10-02T19:00:41.825931378Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:00:41.825950 env[1147]: time="2023-10-02T19:00:41.825942938Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:00:41.826005 env[1147]: time="2023-10-02T19:00:41.825957778Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:00:41.826005 env[1147]: time="2023-10-02T19:00:41.825969418Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:00:41.826005 env[1147]: time="2023-10-02T19:00:41.825988018Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:00:41.826066 env[1147]: time="2023-10-02T19:00:41.826026618Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:00:41.826275 env[1147]: time="2023-10-02T19:00:41.826222898Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:00:41.828948 env[1147]: time="2023-10-02T19:00:41.826278978Z" level=info msg="Connect containerd service" Oct 2 19:00:41.828948 env[1147]: time="2023-10-02T19:00:41.826312538Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:00:41.828948 env[1147]: time="2023-10-02T19:00:41.826960458Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:00:41.828948 env[1147]: time="2023-10-02T19:00:41.827318658Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:00:41.828948 env[1147]: time="2023-10-02T19:00:41.827355778Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:00:41.828948 env[1147]: time="2023-10-02T19:00:41.827399778Z" level=info msg="containerd successfully booted in 0.039729s" Oct 2 19:00:41.828948 env[1147]: time="2023-10-02T19:00:41.828727138Z" level=info msg="Start subscribing containerd event" Oct 2 19:00:41.828948 env[1147]: time="2023-10-02T19:00:41.828867658Z" level=info msg="Start recovering state" Oct 2 19:00:41.828948 env[1147]: time="2023-10-02T19:00:41.828933378Z" level=info msg="Start event monitor" Oct 2 19:00:41.827482 systemd[1]: Started containerd.service. Oct 2 19:00:41.829239 env[1147]: time="2023-10-02T19:00:41.828968738Z" level=info msg="Start snapshots syncer" Oct 2 19:00:41.829239 env[1147]: time="2023-10-02T19:00:41.828979818Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:00:41.829239 env[1147]: time="2023-10-02T19:00:41.828987138Z" level=info msg="Start streaming server" Oct 2 19:00:41.850573 tar[1142]: ./vrf Oct 2 19:00:41.880363 tar[1142]: ./bridge Oct 2 19:00:41.903240 locksmithd[1172]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:00:41.915064 tar[1142]: ./tuning Oct 2 19:00:41.940813 tar[1142]: ./firewall Oct 2 19:00:41.954035 systemd[1]: Finished prepare-critools.service. Oct 2 19:00:41.970462 tar[1142]: ./host-device Oct 2 19:00:41.996587 tar[1142]: ./sbr Oct 2 19:00:42.020276 tar[1142]: ./loopback Oct 2 19:00:42.043189 tar[1142]: ./dhcp Oct 2 19:00:42.107538 tar[1142]: ./ptp Oct 2 19:00:42.135370 tar[1142]: ./ipvlan Oct 2 19:00:42.162451 tar[1142]: ./bandwidth Oct 2 19:00:42.202820 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:00:42.837627 systemd-networkd[1050]: eth0: Gained IPv6LL Oct 2 19:00:43.083207 systemd[1]: Created slice system-sshd.slice. Oct 2 19:00:44.832995 sshd_keygen[1137]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:00:44.852192 systemd[1]: Finished sshd-keygen.service. Oct 2 19:00:44.854437 systemd[1]: Starting issuegen.service... Oct 2 19:00:44.856193 systemd[1]: Started sshd@0-10.0.0.82:22-10.0.0.1:58024.service. Oct 2 19:00:44.860063 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:00:44.860223 systemd[1]: Finished issuegen.service. Oct 2 19:00:44.862349 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:00:44.869838 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:00:44.871903 systemd[1]: Started getty@tty1.service. Oct 2 19:00:44.873925 systemd[1]: Started serial-getty@ttyAMA0.service. Oct 2 19:00:44.875088 systemd[1]: Reached target getty.target. Oct 2 19:00:44.876001 systemd[1]: Reached target multi-user.target. Oct 2 19:00:44.878169 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:00:44.885345 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:00:44.885493 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:00:44.886700 systemd[1]: Startup finished in 620ms (kernel) + 5.256s (initrd) + 6.507s (userspace) = 12.384s. Oct 2 19:00:44.911229 sshd[1195]: Accepted publickey for core from 10.0.0.1 port 58024 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:00:44.913221 sshd[1195]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:00:44.921981 systemd-logind[1138]: New session 1 of user core. Oct 2 19:00:44.922934 systemd[1]: Created slice user-500.slice. Oct 2 19:00:44.924014 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:00:44.932671 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:00:44.934053 systemd[1]: Starting user@500.service... Oct 2 19:00:44.937365 (systemd)[1204]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:00:45.006859 systemd[1204]: Queued start job for default target default.target. Oct 2 19:00:45.007325 systemd[1204]: Reached target paths.target. Oct 2 19:00:45.007341 systemd[1204]: Reached target sockets.target. Oct 2 19:00:45.007352 systemd[1204]: Reached target timers.target. Oct 2 19:00:45.007362 systemd[1204]: Reached target basic.target. Oct 2 19:00:45.007414 systemd[1204]: Reached target default.target. Oct 2 19:00:45.007442 systemd[1204]: Startup finished in 63ms. Oct 2 19:00:45.007529 systemd[1]: Started user@500.service. Oct 2 19:00:45.008465 systemd[1]: Started session-1.scope. Oct 2 19:00:45.064594 systemd[1]: Started sshd@1-10.0.0.82:22-10.0.0.1:58036.service. Oct 2 19:00:45.115046 sshd[1213]: Accepted publickey for core from 10.0.0.1 port 58036 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:00:45.116641 sshd[1213]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:00:45.128972 systemd[1]: Started session-2.scope. Oct 2 19:00:45.130277 systemd-logind[1138]: New session 2 of user core. Oct 2 19:00:45.198002 sshd[1213]: pam_unix(sshd:session): session closed for user core Oct 2 19:00:45.203015 systemd[1]: sshd@1-10.0.0.82:22-10.0.0.1:58036.service: Deactivated successfully. Oct 2 19:00:45.204026 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:00:45.205422 systemd-logind[1138]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:00:45.206205 systemd[1]: Started sshd@2-10.0.0.82:22-10.0.0.1:58050.service. Oct 2 19:00:45.207282 systemd-logind[1138]: Removed session 2. Oct 2 19:00:45.253957 sshd[1219]: Accepted publickey for core from 10.0.0.1 port 58050 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:00:45.255868 sshd[1219]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:00:45.262054 systemd-logind[1138]: New session 3 of user core. Oct 2 19:00:45.263256 systemd[1]: Started session-3.scope. Oct 2 19:00:45.321374 sshd[1219]: pam_unix(sshd:session): session closed for user core Oct 2 19:00:45.327360 systemd[1]: Started sshd@3-10.0.0.82:22-10.0.0.1:58054.service. Oct 2 19:00:45.328124 systemd[1]: sshd@2-10.0.0.82:22-10.0.0.1:58050.service: Deactivated successfully. Oct 2 19:00:45.328941 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:00:45.329535 systemd-logind[1138]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:00:45.331819 systemd-logind[1138]: Removed session 3. Oct 2 19:00:45.374202 sshd[1225]: Accepted publickey for core from 10.0.0.1 port 58054 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:00:45.377137 sshd[1225]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:00:45.384765 systemd-logind[1138]: New session 4 of user core. Oct 2 19:00:45.390989 systemd[1]: Started session-4.scope. Oct 2 19:00:45.457776 sshd[1225]: pam_unix(sshd:session): session closed for user core Oct 2 19:00:45.462331 systemd[1]: Started sshd@4-10.0.0.82:22-10.0.0.1:58062.service. Oct 2 19:00:45.462798 systemd[1]: sshd@3-10.0.0.82:22-10.0.0.1:58054.service: Deactivated successfully. Oct 2 19:00:45.463484 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:00:45.473365 systemd-logind[1138]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:00:45.474615 systemd-logind[1138]: Removed session 4. Oct 2 19:00:45.511241 sshd[1231]: Accepted publickey for core from 10.0.0.1 port 58062 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:00:45.512566 sshd[1231]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:00:45.519100 systemd-logind[1138]: New session 5 of user core. Oct 2 19:00:45.521940 systemd[1]: Started session-5.scope. Oct 2 19:00:45.597280 sudo[1235]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:00:45.597836 sudo[1235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:00:45.612763 dbus-daemon[1119]: avc: received setenforce notice (enforcing=1) Oct 2 19:00:45.615142 sudo[1235]: pam_unix(sudo:session): session closed for user root Oct 2 19:00:45.618447 sshd[1231]: pam_unix(sshd:session): session closed for user core Oct 2 19:00:45.622791 systemd[1]: Started sshd@5-10.0.0.82:22-10.0.0.1:58064.service. Oct 2 19:00:45.623314 systemd[1]: sshd@4-10.0.0.82:22-10.0.0.1:58062.service: Deactivated successfully. Oct 2 19:00:45.623993 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:00:45.627032 systemd-logind[1138]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:00:45.628872 systemd-logind[1138]: Removed session 5. Oct 2 19:00:45.667843 sshd[1238]: Accepted publickey for core from 10.0.0.1 port 58064 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:00:45.669967 sshd[1238]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:00:45.675338 systemd[1]: Started session-6.scope. Oct 2 19:00:45.675807 systemd-logind[1138]: New session 6 of user core. Oct 2 19:00:45.730547 sudo[1243]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:00:45.730748 sudo[1243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:00:45.738857 sudo[1243]: pam_unix(sudo:session): session closed for user root Oct 2 19:00:45.743862 sudo[1242]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:00:45.744054 sudo[1242]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:00:45.762744 systemd[1]: Stopping audit-rules.service... Oct 2 19:00:45.766370 auditctl[1246]: No rules Oct 2 19:00:45.766658 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:00:45.766831 systemd[1]: Stopped audit-rules.service. Oct 2 19:00:45.769112 systemd[1]: Starting audit-rules.service... Oct 2 19:00:45.764000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:00:45.781112 kernel: kauditd_printk_skb: 113 callbacks suppressed Oct 2 19:00:45.781180 kernel: audit: type=1305 audit(1696273245.764:153): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:00:45.781198 kernel: audit: type=1300 audit(1696273245.764:153): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe56d2c60 a2=420 a3=0 items=0 ppid=1 pid=1246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:45.764000 audit[1246]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe56d2c60 a2=420 a3=0 items=0 ppid=1 pid=1246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:45.785998 kernel: audit: type=1327 audit(1696273245.764:153): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:00:45.764000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:00:45.765000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:45.789607 kernel: audit: type=1131 audit(1696273245.765:154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:45.794102 augenrules[1263]: No rules Oct 2 19:00:45.795195 systemd[1]: Finished audit-rules.service. Oct 2 19:00:45.793000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:45.796474 sudo[1242]: pam_unix(sudo:session): session closed for user root Oct 2 19:00:45.795000 audit[1242]: USER_END pid=1242 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:00:45.801215 sshd[1238]: pam_unix(sshd:session): session closed for user core Oct 2 19:00:45.802603 kernel: audit: type=1130 audit(1696273245.793:155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:45.802663 kernel: audit: type=1106 audit(1696273245.795:156): pid=1242 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:00:45.802680 kernel: audit: type=1104 audit(1696273245.795:157): pid=1242 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:00:45.795000 audit[1242]: CRED_DISP pid=1242 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:00:45.805144 kernel: audit: type=1106 audit(1696273245.802:158): pid=1238 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:00:45.802000 audit[1238]: USER_END pid=1238 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:00:45.812884 kernel: audit: type=1104 audit(1696273245.802:159): pid=1238 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:00:45.802000 audit[1238]: CRED_DISP pid=1238 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:00:45.812000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.82:22-10.0.0.1:58076 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:45.813925 systemd[1]: Started sshd@6-10.0.0.82:22-10.0.0.1:58076.service. Oct 2 19:00:45.814427 systemd[1]: sshd@5-10.0.0.82:22-10.0.0.1:58064.service: Deactivated successfully. Oct 2 19:00:45.815246 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:00:45.815903 systemd-logind[1138]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:00:45.813000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.82:22-10.0.0.1:58064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:45.817106 systemd-logind[1138]: Removed session 6. Oct 2 19:00:45.817518 kernel: audit: type=1130 audit(1696273245.812:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.82:22-10.0.0.1:58076 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:45.855000 audit[1268]: USER_ACCT pid=1268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:00:45.857680 sshd[1268]: Accepted publickey for core from 10.0.0.1 port 58076 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:00:45.857000 audit[1268]: CRED_ACQ pid=1268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:00:45.857000 audit[1268]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffedcf4f50 a2=3 a3=1 items=0 ppid=1 pid=1268 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:45.857000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:00:45.859234 sshd[1268]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:00:45.862983 systemd-logind[1138]: New session 7 of user core. Oct 2 19:00:45.863352 systemd[1]: Started session-7.scope. Oct 2 19:00:45.869000 audit[1268]: USER_START pid=1268 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:00:45.871000 audit[1272]: CRED_ACQ pid=1272 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:00:45.923000 audit[1273]: USER_ACCT pid=1273 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:00:45.923000 audit[1273]: CRED_REFR pid=1273 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:00:45.925099 sudo[1273]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:00:45.925304 sudo[1273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:00:45.926000 audit[1273]: USER_START pid=1273 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:00:46.448444 systemd[1]: Reloading. Oct 2 19:00:46.523264 /usr/lib/systemd/system-generators/torcx-generator[1303]: time="2023-10-02T19:00:46Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:00:46.523290 /usr/lib/systemd/system-generators/torcx-generator[1303]: time="2023-10-02T19:00:46Z" level=info msg="torcx already run" Oct 2 19:00:46.579631 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:00:46.579650 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:00:46.594840 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:00:46.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit: BPF prog-id=31 op=LOAD Oct 2 19:00:46.647000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit: BPF prog-id=32 op=LOAD Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit: BPF prog-id=33 op=LOAD Oct 2 19:00:46.647000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:00:46.647000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.647000 audit: BPF prog-id=34 op=LOAD Oct 2 19:00:46.647000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:00:46.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.648000 audit: BPF prog-id=35 op=LOAD Oct 2 19:00:46.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.648000 audit: BPF prog-id=36 op=LOAD Oct 2 19:00:46.648000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:00:46.648000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:00:46.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.649000 audit: BPF prog-id=37 op=LOAD Oct 2 19:00:46.649000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:00:46.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.650000 audit: BPF prog-id=38 op=LOAD Oct 2 19:00:46.650000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:00:46.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.651000 audit: BPF prog-id=39 op=LOAD Oct 2 19:00:46.651000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:00:46.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.652000 audit: BPF prog-id=40 op=LOAD Oct 2 19:00:46.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.653000 audit: BPF prog-id=41 op=LOAD Oct 2 19:00:46.653000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:00:46.653000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:00:46.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.653000 audit: BPF prog-id=42 op=LOAD Oct 2 19:00:46.653000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit: BPF prog-id=43 op=LOAD Oct 2 19:00:46.654000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit: BPF prog-id=44 op=LOAD Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:46.654000 audit: BPF prog-id=45 op=LOAD Oct 2 19:00:46.654000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:00:46.654000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:00:46.666307 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:00:46.672748 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:00:46.671000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:46.673181 systemd[1]: Reached target network-online.target. Oct 2 19:00:46.674589 systemd[1]: Started kubelet.service. Oct 2 19:00:46.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:46.685161 systemd[1]: Starting coreos-metadata.service... Oct 2 19:00:46.696243 systemd[1]: coreos-metadata.service: Deactivated successfully. Oct 2 19:00:46.696411 systemd[1]: Finished coreos-metadata.service. Oct 2 19:00:46.695000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:46.695000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:46.834870 kubelet[1341]: E1002 19:00:46.834734 1341 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:00:46.840790 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:00:46.839000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:00:46.840922 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:00:47.060086 systemd[1]: Stopped kubelet.service. Oct 2 19:00:47.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:47.058000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:47.076272 systemd[1]: Reloading. Oct 2 19:00:47.127222 /usr/lib/systemd/system-generators/torcx-generator[1410]: time="2023-10-02T19:00:47Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:00:47.127250 /usr/lib/systemd/system-generators/torcx-generator[1410]: time="2023-10-02T19:00:47Z" level=info msg="torcx already run" Oct 2 19:00:47.193927 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:00:47.194069 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:00:47.209351 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:00:47.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.257000 audit: BPF prog-id=46 op=LOAD Oct 2 19:00:47.257000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:00:47.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.257000 audit: BPF prog-id=47 op=LOAD Oct 2 19:00:47.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.258000 audit: BPF prog-id=48 op=LOAD Oct 2 19:00:47.258000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:00:47.258000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:00:47.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.259000 audit: BPF prog-id=49 op=LOAD Oct 2 19:00:47.259000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:00:47.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.261000 audit: BPF prog-id=50 op=LOAD Oct 2 19:00:47.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.261000 audit: BPF prog-id=51 op=LOAD Oct 2 19:00:47.261000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:00:47.261000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:00:47.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.263000 audit: BPF prog-id=52 op=LOAD Oct 2 19:00:47.263000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:00:47.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.265000 audit: BPF prog-id=53 op=LOAD Oct 2 19:00:47.265000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:00:47.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.266000 audit: BPF prog-id=54 op=LOAD Oct 2 19:00:47.266000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:00:47.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.268000 audit: BPF prog-id=55 op=LOAD Oct 2 19:00:47.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.270000 audit: BPF prog-id=56 op=LOAD Oct 2 19:00:47.270000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:00:47.270000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:00:47.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.271000 audit: BPF prog-id=57 op=LOAD Oct 2 19:00:47.271000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:00:47.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.273000 audit: BPF prog-id=58 op=LOAD Oct 2 19:00:47.273000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:00:47.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.275000 audit: BPF prog-id=59 op=LOAD Oct 2 19:00:47.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.275000 audit: BPF prog-id=60 op=LOAD Oct 2 19:00:47.275000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:00:47.275000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:00:47.288897 systemd[1]: Started kubelet.service. Oct 2 19:00:47.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:00:47.344231 kubelet[1448]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 19:00:47.344231 kubelet[1448]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:00:47.344231 kubelet[1448]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:00:47.344576 kubelet[1448]: I1002 19:00:47.344291 1448 server.go:200] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:00:47.345530 kubelet[1448]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 19:00:47.345530 kubelet[1448]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:00:47.345530 kubelet[1448]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:00:47.737758 kubelet[1448]: I1002 19:00:47.737731 1448 server.go:413] "Kubelet version" kubeletVersion="v1.25.10" Oct 2 19:00:47.737758 kubelet[1448]: I1002 19:00:47.737759 1448 server.go:415] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:00:47.740087 kubelet[1448]: I1002 19:00:47.740055 1448 server.go:825] "Client rotation is on, will bootstrap in background" Oct 2 19:00:47.744903 kubelet[1448]: I1002 19:00:47.744869 1448 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:00:47.750428 kubelet[1448]: W1002 19:00:47.750401 1448 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:00:47.751390 kubelet[1448]: I1002 19:00:47.751372 1448 server.go:660] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:00:47.751685 kubelet[1448]: I1002 19:00:47.751668 1448 container_manager_linux.go:262] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:00:47.751749 kubelet[1448]: I1002 19:00:47.751738 1448 container_manager_linux.go:267] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] ExperimentalCPUManagerPolicy:none ExperimentalCPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container ExperimentalCPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none} Oct 2 19:00:47.752562 kubelet[1448]: I1002 19:00:47.752537 1448 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:00:47.752597 kubelet[1448]: I1002 19:00:47.752567 1448 container_manager_linux.go:302] "Creating device plugin manager" devicePluginEnabled=true Oct 2 19:00:47.752685 kubelet[1448]: I1002 19:00:47.752665 1448 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:00:47.759345 kubelet[1448]: I1002 19:00:47.759306 1448 kubelet.go:381] "Attempting to sync node with API server" Oct 2 19:00:47.759345 kubelet[1448]: I1002 19:00:47.759333 1448 kubelet.go:270] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:00:47.759345 kubelet[1448]: I1002 19:00:47.759349 1448 kubelet.go:281] "Adding apiserver pod source" Oct 2 19:00:47.759451 kubelet[1448]: I1002 19:00:47.759359 1448 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:00:47.759917 kubelet[1448]: E1002 19:00:47.759889 1448 file.go:98] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:00:47.760586 kubelet[1448]: E1002 19:00:47.760029 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:00:47.760586 kubelet[1448]: I1002 19:00:47.760529 1448 kuberuntime_manager.go:240] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:00:47.761528 kubelet[1448]: W1002 19:00:47.761506 1448 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:00:47.762226 kubelet[1448]: I1002 19:00:47.762209 1448 server.go:1175] "Started kubelet" Oct 2 19:00:47.762659 kubelet[1448]: I1002 19:00:47.762641 1448 server.go:155] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:00:47.761000 audit[1448]: AVC avc: denied { mac_admin } for pid=1448 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.761000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:00:47.761000 audit[1448]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000935b90 a1=40002a1758 a2=4000935b60 a3=25 items=0 ppid=1 pid=1448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.761000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:00:47.762000 audit[1448]: AVC avc: denied { mac_admin } for pid=1448 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.762000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:00:47.762000 audit[1448]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40008537e0 a1=4000b00288 a2=400015fe60 a3=25 items=0 ppid=1 pid=1448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.762000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:00:47.764751 kubelet[1448]: E1002 19:00:47.763334 1448 cri_stats_provider.go:452] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:00:47.764751 kubelet[1448]: E1002 19:00:47.764460 1448 kubelet.go:1317] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:00:47.764751 kubelet[1448]: I1002 19:00:47.763527 1448 kubelet.go:1274] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:00:47.764751 kubelet[1448]: I1002 19:00:47.764547 1448 kubelet.go:1278] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:00:47.764751 kubelet[1448]: I1002 19:00:47.764708 1448 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:00:47.765540 kubelet[1448]: I1002 19:00:47.764895 1448 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:00:47.765920 kubelet[1448]: I1002 19:00:47.765892 1448 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Oct 2 19:00:47.766300 kubelet[1448]: E1002 19:00:47.766276 1448 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:00:47.767107 kubelet[1448]: I1002 19:00:47.767090 1448 server.go:438] "Adding debug handlers to kubelet server" Oct 2 19:00:47.775443 kubelet[1448]: W1002 19:00:47.775403 1448 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.CSIDriver: csidrivers.storage.k8s.io is forbidden: User "system:anonymous" cannot list resource "csidrivers" in API group "storage.k8s.io" at the cluster scope Oct 2 19:00:47.775577 kubelet[1448]: E1002 19:00:47.775561 1448 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: csidrivers.storage.k8s.io is forbidden: User "system:anonymous" cannot list resource "csidrivers" in API group "storage.k8s.io" at the cluster scope Oct 2 19:00:47.775651 kubelet[1448]: W1002 19:00:47.775621 1448 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Node: nodes "10.0.0.82" is forbidden: User "system:anonymous" cannot list resource "nodes" in API group "" at the cluster scope Oct 2 19:00:47.775710 kubelet[1448]: E1002 19:00:47.775701 1448 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Node: failed to list *v1.Node: nodes "10.0.0.82" is forbidden: User "system:anonymous" cannot list resource "nodes" in API group "" at the cluster scope Oct 2 19:00:47.775768 kubelet[1448]: E1002 19:00:47.775642 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f8816dcf90a", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 762184458, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 762184458, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events is forbidden: User "system:anonymous" cannot create resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:47.775986 kubelet[1448]: E1002 19:00:47.775737 1448 controller.go:144] failed to ensure lease exists, will retry in 200ms, error: leases.coordination.k8s.io "10.0.0.82" is forbidden: User "system:anonymous" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "kube-node-lease" Oct 2 19:00:47.775986 kubelet[1448]: W1002 19:00:47.775836 1448 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Service: services is forbidden: User "system:anonymous" cannot list resource "services" in API group "" at the cluster scope Oct 2 19:00:47.776065 kubelet[1448]: E1002 19:00:47.775996 1448 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Service: failed to list *v1.Service: services is forbidden: User "system:anonymous" cannot list resource "services" in API group "" at the cluster scope Oct 2 19:00:47.777736 kubelet[1448]: E1002 19:00:47.777666 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f8816ff8722", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"InvalidDiskCapacity", Message:"invalid capacity 0 on image filesystem", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 764449058, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 764449058, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events is forbidden: User "system:anonymous" cannot create resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:47.786383 kubelet[1448]: I1002 19:00:47.786203 1448 cpu_manager.go:213] "Starting CPU manager" policy="none" Oct 2 19:00:47.786383 kubelet[1448]: I1002 19:00:47.786251 1448 cpu_manager.go:214] "Reconciling" reconcilePeriod="10s" Oct 2 19:00:47.786383 kubelet[1448]: I1002 19:00:47.786267 1448 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:00:47.786572 kubelet[1448]: E1002 19:00:47.786491 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f88183c9b2a", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node 10.0.0.82 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785229098, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785229098, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events is forbidden: User "system:anonymous" cannot create resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:47.787540 kubelet[1448]: E1002 19:00:47.787193 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f88183cb0e2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node 10.0.0.82 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785234658, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785234658, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events is forbidden: User "system:anonymous" cannot create resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:47.788258 kubelet[1448]: E1002 19:00:47.787818 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f88183cc2b2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node 10.0.0.82 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785239218, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785239218, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events is forbidden: User "system:anonymous" cannot create resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:47.788258 kubelet[1448]: I1002 19:00:47.788094 1448 policy_none.go:49] "None policy: Start" Oct 2 19:00:47.788551 kubelet[1448]: I1002 19:00:47.788527 1448 memory_manager.go:168] "Starting memorymanager" policy="None" Oct 2 19:00:47.788551 kubelet[1448]: I1002 19:00:47.788548 1448 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:00:47.794332 systemd[1]: Created slice kubepods.slice. Oct 2 19:00:47.798101 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:00:47.796000 audit[1468]: NETFILTER_CFG table=mangle:2 family=2 entries=2 op=nft_register_chain pid=1468 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:00:47.796000 audit[1468]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdae240d0 a2=0 a3=1 items=0 ppid=1448 pid=1468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.796000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:00:47.800471 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:00:47.800000 audit[1470]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1470 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:00:47.800000 audit[1470]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=ffffc6874880 a2=0 a3=1 items=0 ppid=1448 pid=1470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.800000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:00:47.809265 kubelet[1448]: I1002 19:00:47.809240 1448 manager.go:447] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:00:47.809328 kubelet[1448]: I1002 19:00:47.809296 1448 server.go:86] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:00:47.807000 audit[1448]: AVC avc: denied { mac_admin } for pid=1448 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:00:47.807000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:00:47.807000 audit[1448]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000935bc0 a1=4001053350 a2=4000935b90 a3=25 items=0 ppid=1 pid=1448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.807000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:00:47.809548 kubelet[1448]: I1002 19:00:47.809520 1448 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:00:47.811507 kubelet[1448]: E1002 19:00:47.811472 1448 eviction_manager.go:256] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"10.0.0.82\" not found" Oct 2 19:00:47.811880 kubelet[1448]: E1002 19:00:47.811792 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f8819c0b9c2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeAllocatableEnforced", Message:"Updated Node Allocatable limit across pods", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 810664898, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 810664898, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events is forbidden: User "system:anonymous" cannot create resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:47.804000 audit[1472]: NETFILTER_CFG table=filter:4 family=2 entries=2 op=nft_register_chain pid=1472 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:00:47.804000 audit[1472]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc3f9e600 a2=0 a3=1 items=0 ppid=1448 pid=1472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.804000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:00:47.832000 audit[1477]: NETFILTER_CFG table=filter:5 family=2 entries=2 op=nft_register_chain pid=1477 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:00:47.832000 audit[1477]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe46c7510 a2=0 a3=1 items=0 ppid=1448 pid=1477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.832000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:00:47.865764 kubelet[1448]: E1002 19:00:47.865742 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:47.866183 kubelet[1448]: I1002 19:00:47.866157 1448 kubelet_node_status.go:70] "Attempting to register node" node="10.0.0.82" Oct 2 19:00:47.867095 kubelet[1448]: E1002 19:00:47.867072 1448 kubelet_node_status.go:92] "Unable to register node with API server" err="nodes is forbidden: User \"system:anonymous\" cannot create resource \"nodes\" in API group \"\" at the cluster scope" node="10.0.0.82" Oct 2 19:00:47.865000 audit[1482]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1482 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:00:47.865000 audit[1482]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffd5df7fc0 a2=0 a3=1 items=0 ppid=1448 pid=1482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.865000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:00:47.866000 audit[1483]: NETFILTER_CFG table=nat:7 family=2 entries=2 op=nft_register_chain pid=1483 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:00:47.866000 audit[1483]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=fffff95ff940 a2=0 a3=1 items=0 ppid=1448 pid=1483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.866000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:00:47.879000 audit[1486]: NETFILTER_CFG table=nat:8 family=2 entries=1 op=nft_register_rule pid=1486 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:00:47.879000 audit[1486]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe0e14840 a2=0 a3=1 items=0 ppid=1448 pid=1486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.879000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:00:47.884000 audit[1489]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1489 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:00:47.884000 audit[1489]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=ffffd4015540 a2=0 a3=1 items=0 ppid=1448 pid=1489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.884000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:00:47.885000 audit[1490]: NETFILTER_CFG table=nat:10 family=2 entries=1 op=nft_register_chain pid=1490 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:00:47.885000 audit[1490]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffee1c0610 a2=0 a3=1 items=0 ppid=1448 pid=1490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.885000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:00:47.887000 audit[1491]: NETFILTER_CFG table=nat:11 family=2 entries=1 op=nft_register_chain pid=1491 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:00:47.887000 audit[1491]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffda0e1420 a2=0 a3=1 items=0 ppid=1448 pid=1491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.887000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:00:47.889000 audit[1493]: NETFILTER_CFG table=nat:12 family=2 entries=1 op=nft_register_rule pid=1493 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:00:47.889000 audit[1493]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffd66c7800 a2=0 a3=1 items=0 ppid=1448 pid=1493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.889000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:00:47.892000 audit[1495]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1495 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:00:47.892000 audit[1495]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffd2648640 a2=0 a3=1 items=0 ppid=1448 pid=1495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.892000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:00:47.922000 audit[1498]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1498 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:00:47.922000 audit[1498]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=ffffdf7832e0 a2=0 a3=1 items=0 ppid=1448 pid=1498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.922000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:00:47.926000 audit[1500]: NETFILTER_CFG table=nat:15 family=2 entries=1 op=nft_register_rule pid=1500 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:00:47.926000 audit[1500]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=ffffe08c5130 a2=0 a3=1 items=0 ppid=1448 pid=1500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.926000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:00:47.933000 audit[1503]: NETFILTER_CFG table=nat:16 family=2 entries=1 op=nft_register_rule pid=1503 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:00:47.933000 audit[1503]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=540 a0=3 a1=fffff476d4f0 a2=0 a3=1 items=0 ppid=1448 pid=1503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.933000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:00:47.935420 kubelet[1448]: I1002 19:00:47.935401 1448 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:00:47.934000 audit[1504]: NETFILTER_CFG table=mangle:17 family=10 entries=2 op=nft_register_chain pid=1504 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:00:47.934000 audit[1504]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffcdba2100 a2=0 a3=1 items=0 ppid=1448 pid=1504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.934000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:00:47.935000 audit[1505]: NETFILTER_CFG table=mangle:18 family=2 entries=1 op=nft_register_chain pid=1505 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:00:47.935000 audit[1505]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe19190a0 a2=0 a3=1 items=0 ppid=1448 pid=1505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.935000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:00:47.936000 audit[1506]: NETFILTER_CFG table=nat:19 family=10 entries=2 op=nft_register_chain pid=1506 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:00:47.936000 audit[1506]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffdd02dd50 a2=0 a3=1 items=0 ppid=1448 pid=1506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.936000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:00:47.936000 audit[1507]: NETFILTER_CFG table=nat:20 family=2 entries=1 op=nft_register_chain pid=1507 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:00:47.936000 audit[1507]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd04b8c90 a2=0 a3=1 items=0 ppid=1448 pid=1507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.936000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:00:47.938000 audit[1509]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_chain pid=1509 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:00:47.938000 audit[1509]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff897d3e0 a2=0 a3=1 items=0 ppid=1448 pid=1509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.938000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:00:47.938000 audit[1510]: NETFILTER_CFG table=nat:22 family=10 entries=1 op=nft_register_rule pid=1510 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:00:47.938000 audit[1510]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffedb4d8d0 a2=0 a3=1 items=0 ppid=1448 pid=1510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.938000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:00:47.951000 audit[1511]: NETFILTER_CFG table=filter:23 family=10 entries=2 op=nft_register_chain pid=1511 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:00:47.951000 audit[1511]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=fffff395a450 a2=0 a3=1 items=0 ppid=1448 pid=1511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.951000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:00:47.954000 audit[1513]: NETFILTER_CFG table=filter:24 family=10 entries=1 op=nft_register_rule pid=1513 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:00:47.954000 audit[1513]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=ffffd4378c60 a2=0 a3=1 items=0 ppid=1448 pid=1513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.954000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:00:47.955000 audit[1514]: NETFILTER_CFG table=nat:25 family=10 entries=1 op=nft_register_chain pid=1514 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:00:47.955000 audit[1514]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd9272620 a2=0 a3=1 items=0 ppid=1448 pid=1514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.955000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:00:47.956000 audit[1515]: NETFILTER_CFG table=nat:26 family=10 entries=1 op=nft_register_chain pid=1515 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:00:47.956000 audit[1515]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff4e2b570 a2=0 a3=1 items=0 ppid=1448 pid=1515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.956000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:00:47.959000 audit[1517]: NETFILTER_CFG table=nat:27 family=10 entries=1 op=nft_register_rule pid=1517 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:00:47.959000 audit[1517]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffff5cbda00 a2=0 a3=1 items=0 ppid=1448 pid=1517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.959000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:00:47.961000 audit[1519]: NETFILTER_CFG table=nat:28 family=10 entries=2 op=nft_register_chain pid=1519 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:00:47.961000 audit[1519]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffed41f7f0 a2=0 a3=1 items=0 ppid=1448 pid=1519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.961000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:00:47.965954 kubelet[1448]: E1002 19:00:47.965923 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:47.964000 audit[1521]: NETFILTER_CFG table=nat:29 family=10 entries=1 op=nft_register_rule pid=1521 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:00:47.964000 audit[1521]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=ffffefbd16b0 a2=0 a3=1 items=0 ppid=1448 pid=1521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.964000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:00:47.967000 audit[1523]: NETFILTER_CFG table=nat:30 family=10 entries=1 op=nft_register_rule pid=1523 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:00:47.967000 audit[1523]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=fffff0ec2580 a2=0 a3=1 items=0 ppid=1448 pid=1523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.967000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:00:47.970000 audit[1525]: NETFILTER_CFG table=nat:31 family=10 entries=1 op=nft_register_rule pid=1525 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:00:47.970000 audit[1525]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=556 a0=3 a1=ffffecbb8500 a2=0 a3=1 items=0 ppid=1448 pid=1525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.970000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:00:47.972889 kubelet[1448]: I1002 19:00:47.972855 1448 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:00:47.972889 kubelet[1448]: I1002 19:00:47.972893 1448 status_manager.go:161] "Starting to sync pod status with apiserver" Oct 2 19:00:47.972977 kubelet[1448]: I1002 19:00:47.972911 1448 kubelet.go:2010] "Starting kubelet main sync loop" Oct 2 19:00:47.972977 kubelet[1448]: E1002 19:00:47.972959 1448 kubelet.go:2034] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:00:47.972000 audit[1526]: NETFILTER_CFG table=mangle:32 family=10 entries=1 op=nft_register_chain pid=1526 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:00:47.972000 audit[1526]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe6f9f820 a2=0 a3=1 items=0 ppid=1448 pid=1526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.972000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:00:47.974924 kubelet[1448]: W1002 19:00:47.974894 1448 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.RuntimeClass: runtimeclasses.node.k8s.io is forbidden: User "system:anonymous" cannot list resource "runtimeclasses" in API group "node.k8s.io" at the cluster scope Oct 2 19:00:47.974924 kubelet[1448]: E1002 19:00:47.974925 1448 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: runtimeclasses.node.k8s.io is forbidden: User "system:anonymous" cannot list resource "runtimeclasses" in API group "node.k8s.io" at the cluster scope Oct 2 19:00:47.975007 kubelet[1448]: E1002 19:00:47.974889 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f88183c9b2a", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node 10.0.0.82 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785229098, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 866107338, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.82.178a5f88183c9b2a" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:47.973000 audit[1527]: NETFILTER_CFG table=nat:33 family=10 entries=1 op=nft_register_chain pid=1527 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:00:47.973000 audit[1527]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff8861480 a2=0 a3=1 items=0 ppid=1448 pid=1527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.973000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:00:47.975854 kubelet[1448]: E1002 19:00:47.975779 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f88183cb0e2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node 10.0.0.82 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785234658, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 866118938, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.82.178a5f88183cb0e2" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:47.975000 audit[1528]: NETFILTER_CFG table=filter:34 family=10 entries=1 op=nft_register_chain pid=1528 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:00:47.975000 audit[1528]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff6c9d190 a2=0 a3=1 items=0 ppid=1448 pid=1528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:00:47.975000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:00:47.976976 kubelet[1448]: E1002 19:00:47.976676 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f88183cc2b2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node 10.0.0.82 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785239218, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 866122378, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.82.178a5f88183cc2b2" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:47.977037 kubelet[1448]: E1002 19:00:47.976974 1448 controller.go:144] failed to ensure lease exists, will retry in 400ms, error: leases.coordination.k8s.io "10.0.0.82" is forbidden: User "system:anonymous" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "kube-node-lease" Oct 2 19:00:48.067607 kubelet[1448]: E1002 19:00:48.066484 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:48.068458 kubelet[1448]: I1002 19:00:48.068403 1448 kubelet_node_status.go:70] "Attempting to register node" node="10.0.0.82" Oct 2 19:00:48.070046 kubelet[1448]: E1002 19:00:48.069719 1448 kubelet_node_status.go:92] "Unable to register node with API server" err="nodes is forbidden: User \"system:anonymous\" cannot create resource \"nodes\" in API group \"\" at the cluster scope" node="10.0.0.82" Oct 2 19:00:48.071619 kubelet[1448]: E1002 19:00:48.071490 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f88183c9b2a", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node 10.0.0.82 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785229098, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 48, 68371618, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.82.178a5f88183c9b2a" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:48.073316 kubelet[1448]: E1002 19:00:48.073185 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f88183cb0e2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node 10.0.0.82 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785234658, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 48, 68376698, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.82.178a5f88183cb0e2" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:48.166734 kubelet[1448]: E1002 19:00:48.166675 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:48.166870 kubelet[1448]: E1002 19:00:48.166704 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f88183cc2b2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node 10.0.0.82 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785239218, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 48, 68379898, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.82.178a5f88183cc2b2" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:48.267440 kubelet[1448]: E1002 19:00:48.267391 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:48.368015 kubelet[1448]: E1002 19:00:48.367906 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:48.378690 kubelet[1448]: E1002 19:00:48.378645 1448 controller.go:144] failed to ensure lease exists, will retry in 800ms, error: leases.coordination.k8s.io "10.0.0.82" is forbidden: User "system:anonymous" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "kube-node-lease" Oct 2 19:00:48.469126 kubelet[1448]: E1002 19:00:48.468984 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:48.470732 kubelet[1448]: I1002 19:00:48.470705 1448 kubelet_node_status.go:70] "Attempting to register node" node="10.0.0.82" Oct 2 19:00:48.477000 kubelet[1448]: E1002 19:00:48.476963 1448 kubelet_node_status.go:92] "Unable to register node with API server" err="nodes is forbidden: User \"system:anonymous\" cannot create resource \"nodes\" in API group \"\" at the cluster scope" node="10.0.0.82" Oct 2 19:00:48.477147 kubelet[1448]: E1002 19:00:48.476958 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f88183c9b2a", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node 10.0.0.82 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785229098, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 48, 470649218, time.Local), Count:4, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.82.178a5f88183c9b2a" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:48.565851 kubelet[1448]: E1002 19:00:48.565743 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f88183cb0e2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node 10.0.0.82 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785234658, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 48, 470661298, time.Local), Count:4, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.82.178a5f88183cb0e2" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:48.569964 kubelet[1448]: E1002 19:00:48.569932 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:48.670328 kubelet[1448]: E1002 19:00:48.670226 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:48.761028 kubelet[1448]: E1002 19:00:48.760986 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:00:48.765891 kubelet[1448]: E1002 19:00:48.765793 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f88183cc2b2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node 10.0.0.82 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785239218, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 48, 470677338, time.Local), Count:4, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.82.178a5f88183cc2b2" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:48.771072 kubelet[1448]: E1002 19:00:48.771047 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:48.871935 kubelet[1448]: E1002 19:00:48.871900 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:48.885434 kubelet[1448]: W1002 19:00:48.885412 1448 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.CSIDriver: csidrivers.storage.k8s.io is forbidden: User "system:anonymous" cannot list resource "csidrivers" in API group "storage.k8s.io" at the cluster scope Oct 2 19:00:48.885434 kubelet[1448]: E1002 19:00:48.885440 1448 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: csidrivers.storage.k8s.io is forbidden: User "system:anonymous" cannot list resource "csidrivers" in API group "storage.k8s.io" at the cluster scope Oct 2 19:00:48.972818 kubelet[1448]: E1002 19:00:48.972692 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:49.073293 kubelet[1448]: E1002 19:00:49.073250 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:49.167178 kubelet[1448]: W1002 19:00:49.167135 1448 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.RuntimeClass: runtimeclasses.node.k8s.io is forbidden: User "system:anonymous" cannot list resource "runtimeclasses" in API group "node.k8s.io" at the cluster scope Oct 2 19:00:49.167178 kubelet[1448]: E1002 19:00:49.167169 1448 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: runtimeclasses.node.k8s.io is forbidden: User "system:anonymous" cannot list resource "runtimeclasses" in API group "node.k8s.io" at the cluster scope Oct 2 19:00:49.174940 kubelet[1448]: E1002 19:00:49.174898 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:49.180038 kubelet[1448]: E1002 19:00:49.180005 1448 controller.go:144] failed to ensure lease exists, will retry in 1.6s, error: leases.coordination.k8s.io "10.0.0.82" is forbidden: User "system:anonymous" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "kube-node-lease" Oct 2 19:00:49.234824 kubelet[1448]: W1002 19:00:49.234704 1448 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Service: services is forbidden: User "system:anonymous" cannot list resource "services" in API group "" at the cluster scope Oct 2 19:00:49.234824 kubelet[1448]: E1002 19:00:49.234738 1448 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Service: failed to list *v1.Service: services is forbidden: User "system:anonymous" cannot list resource "services" in API group "" at the cluster scope Oct 2 19:00:49.268102 kubelet[1448]: W1002 19:00:49.268059 1448 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Node: nodes "10.0.0.82" is forbidden: User "system:anonymous" cannot list resource "nodes" in API group "" at the cluster scope Oct 2 19:00:49.268102 kubelet[1448]: E1002 19:00:49.268089 1448 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Node: failed to list *v1.Node: nodes "10.0.0.82" is forbidden: User "system:anonymous" cannot list resource "nodes" in API group "" at the cluster scope Oct 2 19:00:49.275265 kubelet[1448]: E1002 19:00:49.275233 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:49.277981 kubelet[1448]: I1002 19:00:49.277952 1448 kubelet_node_status.go:70] "Attempting to register node" node="10.0.0.82" Oct 2 19:00:49.283045 kubelet[1448]: E1002 19:00:49.283018 1448 kubelet_node_status.go:92] "Unable to register node with API server" err="nodes is forbidden: User \"system:anonymous\" cannot create resource \"nodes\" in API group \"\" at the cluster scope" node="10.0.0.82" Oct 2 19:00:49.283196 kubelet[1448]: E1002 19:00:49.283123 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f88183c9b2a", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node 10.0.0.82 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785229098, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 49, 277923938, time.Local), Count:5, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.82.178a5f88183c9b2a" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:49.284388 kubelet[1448]: E1002 19:00:49.284309 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f88183cb0e2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node 10.0.0.82 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785234658, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 49, 277928458, time.Local), Count:5, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.82.178a5f88183cb0e2" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:49.366209 kubelet[1448]: E1002 19:00:49.366109 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f88183cc2b2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node 10.0.0.82 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785239218, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 49, 277931738, time.Local), Count:5, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.82.178a5f88183cc2b2" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:49.376269 kubelet[1448]: E1002 19:00:49.376235 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:49.476766 kubelet[1448]: E1002 19:00:49.476728 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:49.577330 kubelet[1448]: E1002 19:00:49.577211 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:49.678744 kubelet[1448]: E1002 19:00:49.678711 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:49.762151 kubelet[1448]: E1002 19:00:49.762108 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:00:49.779749 kubelet[1448]: E1002 19:00:49.779721 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:49.880563 kubelet[1448]: E1002 19:00:49.880460 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:49.980772 kubelet[1448]: E1002 19:00:49.980738 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:50.083012 kubelet[1448]: E1002 19:00:50.082970 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:50.183683 kubelet[1448]: E1002 19:00:50.183582 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:50.284354 kubelet[1448]: E1002 19:00:50.284321 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:50.385427 kubelet[1448]: E1002 19:00:50.385382 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:50.486116 kubelet[1448]: E1002 19:00:50.486023 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:50.586765 kubelet[1448]: E1002 19:00:50.586708 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:50.687298 kubelet[1448]: E1002 19:00:50.687269 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:50.762778 kubelet[1448]: E1002 19:00:50.762689 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:00:50.781944 kubelet[1448]: E1002 19:00:50.781889 1448 controller.go:144] failed to ensure lease exists, will retry in 3.2s, error: leases.coordination.k8s.io "10.0.0.82" is forbidden: User "system:anonymous" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "kube-node-lease" Oct 2 19:00:50.788665 kubelet[1448]: E1002 19:00:50.788626 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:50.888112 kubelet[1448]: I1002 19:00:50.887690 1448 kubelet_node_status.go:70] "Attempting to register node" node="10.0.0.82" Oct 2 19:00:50.889284 kubelet[1448]: E1002 19:00:50.888678 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:50.889284 kubelet[1448]: E1002 19:00:50.888874 1448 kubelet_node_status.go:92] "Unable to register node with API server" err="nodes is forbidden: User \"system:anonymous\" cannot create resource \"nodes\" in API group \"\" at the cluster scope" node="10.0.0.82" Oct 2 19:00:50.889284 kubelet[1448]: E1002 19:00:50.888930 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f88183c9b2a", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node 10.0.0.82 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785229098, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 50, 887656898, time.Local), Count:6, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.82.178a5f88183c9b2a" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:50.891880 kubelet[1448]: E1002 19:00:50.891012 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f88183cb0e2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node 10.0.0.82 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785234658, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 50, 887661938, time.Local), Count:6, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.82.178a5f88183cb0e2" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:50.892604 kubelet[1448]: E1002 19:00:50.892541 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f88183cc2b2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node 10.0.0.82 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785239218, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 50, 887664818, time.Local), Count:6, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.82.178a5f88183cc2b2" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:50.989048 kubelet[1448]: E1002 19:00:50.989002 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:51.089745 kubelet[1448]: E1002 19:00:51.089639 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:51.160170 kubelet[1448]: W1002 19:00:51.160136 1448 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.CSIDriver: csidrivers.storage.k8s.io is forbidden: User "system:anonymous" cannot list resource "csidrivers" in API group "storage.k8s.io" at the cluster scope Oct 2 19:00:51.160170 kubelet[1448]: E1002 19:00:51.160169 1448 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: csidrivers.storage.k8s.io is forbidden: User "system:anonymous" cannot list resource "csidrivers" in API group "storage.k8s.io" at the cluster scope Oct 2 19:00:51.190639 kubelet[1448]: E1002 19:00:51.190607 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:51.203894 kubelet[1448]: W1002 19:00:51.203862 1448 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Service: services is forbidden: User "system:anonymous" cannot list resource "services" in API group "" at the cluster scope Oct 2 19:00:51.203894 kubelet[1448]: E1002 19:00:51.203892 1448 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Service: failed to list *v1.Service: services is forbidden: User "system:anonymous" cannot list resource "services" in API group "" at the cluster scope Oct 2 19:00:51.291837 kubelet[1448]: E1002 19:00:51.291799 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:51.382241 kubelet[1448]: W1002 19:00:51.382141 1448 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.RuntimeClass: runtimeclasses.node.k8s.io is forbidden: User "system:anonymous" cannot list resource "runtimeclasses" in API group "node.k8s.io" at the cluster scope Oct 2 19:00:51.382241 kubelet[1448]: E1002 19:00:51.382175 1448 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: runtimeclasses.node.k8s.io is forbidden: User "system:anonymous" cannot list resource "runtimeclasses" in API group "node.k8s.io" at the cluster scope Oct 2 19:00:51.392520 kubelet[1448]: E1002 19:00:51.392468 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:51.492949 kubelet[1448]: E1002 19:00:51.492913 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:51.593547 kubelet[1448]: E1002 19:00:51.593496 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:51.694124 kubelet[1448]: E1002 19:00:51.694038 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:51.763431 kubelet[1448]: E1002 19:00:51.763392 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:00:51.794964 kubelet[1448]: E1002 19:00:51.794915 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:51.895595 kubelet[1448]: E1002 19:00:51.895546 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:51.996318 kubelet[1448]: E1002 19:00:51.996247 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:52.097013 kubelet[1448]: E1002 19:00:52.096963 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:52.197833 kubelet[1448]: E1002 19:00:52.197793 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:52.277748 kubelet[1448]: W1002 19:00:52.277655 1448 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Node: nodes "10.0.0.82" is forbidden: User "system:anonymous" cannot list resource "nodes" in API group "" at the cluster scope Oct 2 19:00:52.278234 kubelet[1448]: E1002 19:00:52.277886 1448 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Node: failed to list *v1.Node: nodes "10.0.0.82" is forbidden: User "system:anonymous" cannot list resource "nodes" in API group "" at the cluster scope Oct 2 19:00:52.298967 kubelet[1448]: E1002 19:00:52.298924 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:52.399833 kubelet[1448]: E1002 19:00:52.399783 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:52.500402 kubelet[1448]: E1002 19:00:52.500367 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:52.601288 kubelet[1448]: E1002 19:00:52.601180 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:52.701916 kubelet[1448]: E1002 19:00:52.701878 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:52.764525 kubelet[1448]: E1002 19:00:52.764469 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:00:52.802703 kubelet[1448]: E1002 19:00:52.802643 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:52.810291 kubelet[1448]: E1002 19:00:52.810245 1448 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:00:52.903140 kubelet[1448]: E1002 19:00:52.902997 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:53.003891 kubelet[1448]: E1002 19:00:53.003832 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:53.104428 kubelet[1448]: E1002 19:00:53.104364 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:53.205020 kubelet[1448]: E1002 19:00:53.204893 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:53.306824 kubelet[1448]: E1002 19:00:53.305979 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:53.408892 kubelet[1448]: E1002 19:00:53.406774 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:53.508988 kubelet[1448]: E1002 19:00:53.508862 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:53.609263 kubelet[1448]: E1002 19:00:53.609208 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:53.709717 kubelet[1448]: E1002 19:00:53.709676 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:53.765352 kubelet[1448]: E1002 19:00:53.765256 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:00:53.810310 kubelet[1448]: E1002 19:00:53.810268 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:53.910950 kubelet[1448]: E1002 19:00:53.910896 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:53.983637 kubelet[1448]: E1002 19:00:53.983579 1448 controller.go:144] failed to ensure lease exists, will retry in 6.4s, error: leases.coordination.k8s.io "10.0.0.82" is forbidden: User "system:anonymous" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "kube-node-lease" Oct 2 19:00:54.011705 kubelet[1448]: E1002 19:00:54.011640 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:54.090681 kubelet[1448]: I1002 19:00:54.090592 1448 kubelet_node_status.go:70] "Attempting to register node" node="10.0.0.82" Oct 2 19:00:54.093432 kubelet[1448]: E1002 19:00:54.093407 1448 kubelet_node_status.go:92] "Unable to register node with API server" err="nodes is forbidden: User \"system:anonymous\" cannot create resource \"nodes\" in API group \"\" at the cluster scope" node="10.0.0.82" Oct 2 19:00:54.093561 kubelet[1448]: E1002 19:00:54.093402 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f88183c9b2a", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node 10.0.0.82 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785229098, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 54, 90542418, time.Local), Count:7, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.82.178a5f88183c9b2a" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:54.094593 kubelet[1448]: E1002 19:00:54.094531 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f88183cb0e2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node 10.0.0.82 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785234658, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 54, 90554458, time.Local), Count:7, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.82.178a5f88183cb0e2" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:54.095797 kubelet[1448]: E1002 19:00:54.095721 1448 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82.178a5f88183cc2b2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.82", UID:"10.0.0.82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node 10.0.0.82 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.82"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 0, 47, 785239218, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 0, 54, 90557178, time.Local), Count:7, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.82.178a5f88183cc2b2" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 19:00:54.112156 kubelet[1448]: E1002 19:00:54.112123 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:54.212903 kubelet[1448]: E1002 19:00:54.212866 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:54.313871 kubelet[1448]: E1002 19:00:54.313834 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:54.414580 kubelet[1448]: E1002 19:00:54.414465 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:54.515184 kubelet[1448]: E1002 19:00:54.515145 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:54.615876 kubelet[1448]: E1002 19:00:54.615832 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:54.716469 kubelet[1448]: E1002 19:00:54.716355 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:54.765899 kubelet[1448]: E1002 19:00:54.765861 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:00:54.817059 kubelet[1448]: E1002 19:00:54.816988 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:54.917135 kubelet[1448]: E1002 19:00:54.917090 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:55.017647 kubelet[1448]: E1002 19:00:55.017492 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:55.117897 kubelet[1448]: E1002 19:00:55.117857 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:55.219008 kubelet[1448]: E1002 19:00:55.218973 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:55.319380 kubelet[1448]: E1002 19:00:55.319288 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:55.420335 kubelet[1448]: E1002 19:00:55.420273 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:55.520530 kubelet[1448]: E1002 19:00:55.520480 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:55.621389 kubelet[1448]: E1002 19:00:55.621280 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:55.722043 kubelet[1448]: E1002 19:00:55.722006 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:55.766622 kubelet[1448]: E1002 19:00:55.766579 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:00:55.823309 kubelet[1448]: E1002 19:00:55.823240 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:55.925883 kubelet[1448]: E1002 19:00:55.924101 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:56.024862 kubelet[1448]: E1002 19:00:56.024810 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:56.125809 kubelet[1448]: E1002 19:00:56.125309 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:56.225994 kubelet[1448]: E1002 19:00:56.225843 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:56.257302 kubelet[1448]: W1002 19:00:56.257270 1448 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.CSIDriver: csidrivers.storage.k8s.io is forbidden: User "system:anonymous" cannot list resource "csidrivers" in API group "storage.k8s.io" at the cluster scope Oct 2 19:00:56.257427 kubelet[1448]: E1002 19:00:56.257417 1448 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: csidrivers.storage.k8s.io is forbidden: User "system:anonymous" cannot list resource "csidrivers" in API group "storage.k8s.io" at the cluster scope Oct 2 19:00:56.326810 kubelet[1448]: E1002 19:00:56.325948 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:56.404939 kubelet[1448]: W1002 19:00:56.404898 1448 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.RuntimeClass: runtimeclasses.node.k8s.io is forbidden: User "system:anonymous" cannot list resource "runtimeclasses" in API group "node.k8s.io" at the cluster scope Oct 2 19:00:56.404939 kubelet[1448]: E1002 19:00:56.404929 1448 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: runtimeclasses.node.k8s.io is forbidden: User "system:anonymous" cannot list resource "runtimeclasses" in API group "node.k8s.io" at the cluster scope Oct 2 19:00:56.426319 kubelet[1448]: E1002 19:00:56.426286 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:56.526965 kubelet[1448]: E1002 19:00:56.526866 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:56.627426 kubelet[1448]: E1002 19:00:56.627384 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:56.728146 kubelet[1448]: E1002 19:00:56.728112 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:56.767655 kubelet[1448]: E1002 19:00:56.767620 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:00:56.829267 kubelet[1448]: E1002 19:00:56.829156 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:56.931170 kubelet[1448]: E1002 19:00:56.931129 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:57.031718 kubelet[1448]: E1002 19:00:57.031678 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:57.104484 kubelet[1448]: W1002 19:00:57.104396 1448 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Service: services is forbidden: User "system:anonymous" cannot list resource "services" in API group "" at the cluster scope Oct 2 19:00:57.104636 kubelet[1448]: E1002 19:00:57.104624 1448 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Service: failed to list *v1.Service: services is forbidden: User "system:anonymous" cannot list resource "services" in API group "" at the cluster scope Oct 2 19:00:57.132659 kubelet[1448]: E1002 19:00:57.132625 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:57.233294 kubelet[1448]: E1002 19:00:57.233261 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:57.272943 kubelet[1448]: W1002 19:00:57.272912 1448 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Node: nodes "10.0.0.82" is forbidden: User "system:anonymous" cannot list resource "nodes" in API group "" at the cluster scope Oct 2 19:00:57.273089 kubelet[1448]: E1002 19:00:57.273078 1448 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Node: failed to list *v1.Node: nodes "10.0.0.82" is forbidden: User "system:anonymous" cannot list resource "nodes" in API group "" at the cluster scope Oct 2 19:00:57.334220 kubelet[1448]: E1002 19:00:57.334175 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:57.435334 kubelet[1448]: E1002 19:00:57.435213 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:57.535921 kubelet[1448]: E1002 19:00:57.535886 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:57.636615 kubelet[1448]: E1002 19:00:57.636580 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:57.741433 kubelet[1448]: E1002 19:00:57.741271 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:57.742406 kubelet[1448]: I1002 19:00:57.742377 1448 transport.go:135] "Certificate rotation detected, shutting down client connections to start using new credentials" Oct 2 19:00:57.767916 kubelet[1448]: E1002 19:00:57.767868 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:00:57.811703 kubelet[1448]: E1002 19:00:57.811654 1448 eviction_manager.go:256] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"10.0.0.82\" not found" Oct 2 19:00:57.811703 kubelet[1448]: E1002 19:00:57.811670 1448 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:00:57.842312 kubelet[1448]: E1002 19:00:57.842248 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:57.943249 kubelet[1448]: E1002 19:00:57.943177 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:58.043955 kubelet[1448]: E1002 19:00:58.043822 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:58.132606 kubelet[1448]: E1002 19:00:58.131681 1448 csi_plugin.go:295] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "10.0.0.82" not found Oct 2 19:00:58.144141 kubelet[1448]: E1002 19:00:58.144073 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:58.245414 kubelet[1448]: E1002 19:00:58.244902 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:58.345583 kubelet[1448]: E1002 19:00:58.345456 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:58.445805 kubelet[1448]: E1002 19:00:58.445729 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:58.546439 kubelet[1448]: E1002 19:00:58.546370 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:58.647121 kubelet[1448]: E1002 19:00:58.647003 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:58.747719 kubelet[1448]: E1002 19:00:58.747659 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:58.767982 kubelet[1448]: E1002 19:00:58.767930 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:00:58.848671 kubelet[1448]: E1002 19:00:58.848593 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:58.949341 kubelet[1448]: E1002 19:00:58.949217 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:59.049922 kubelet[1448]: E1002 19:00:59.049859 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:59.150602 kubelet[1448]: E1002 19:00:59.150538 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:59.181269 kubelet[1448]: E1002 19:00:59.181225 1448 csi_plugin.go:295] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "10.0.0.82" not found Oct 2 19:00:59.250936 kubelet[1448]: E1002 19:00:59.250807 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:59.351597 kubelet[1448]: E1002 19:00:59.351536 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:59.451902 kubelet[1448]: E1002 19:00:59.451839 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:59.552877 kubelet[1448]: E1002 19:00:59.552219 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:59.653811 kubelet[1448]: E1002 19:00:59.652314 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:59.753275 kubelet[1448]: E1002 19:00:59.753227 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:59.768784 kubelet[1448]: E1002 19:00:59.768700 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:00:59.854370 kubelet[1448]: E1002 19:00:59.854262 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:00:59.954749 kubelet[1448]: E1002 19:00:59.954703 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:00.055409 kubelet[1448]: E1002 19:01:00.055350 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:00.156310 kubelet[1448]: E1002 19:01:00.156144 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:00.256589 kubelet[1448]: E1002 19:01:00.256530 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:00.357148 kubelet[1448]: E1002 19:01:00.357094 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:00.391241 kubelet[1448]: E1002 19:01:00.391206 1448 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"10.0.0.82\" not found" node="10.0.0.82" Oct 2 19:01:00.457448 kubelet[1448]: E1002 19:01:00.457345 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:00.494531 kubelet[1448]: I1002 19:01:00.494484 1448 kubelet_node_status.go:70] "Attempting to register node" node="10.0.0.82" Oct 2 19:01:00.558230 kubelet[1448]: E1002 19:01:00.558180 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:00.580436 kubelet[1448]: I1002 19:01:00.580400 1448 kubelet_node_status.go:73] "Successfully registered node" node="10.0.0.82" Oct 2 19:01:00.658369 kubelet[1448]: E1002 19:01:00.658304 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:00.759005 kubelet[1448]: E1002 19:01:00.758891 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:00.769305 kubelet[1448]: E1002 19:01:00.769250 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:00.808000 audit[1273]: USER_END pid=1273 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:01:00.811105 sudo[1273]: pam_unix(sudo:session): session closed for user root Oct 2 19:01:00.814209 sshd[1268]: pam_unix(sshd:session): session closed for user core Oct 2 19:01:00.816732 kernel: kauditd_printk_skb: 474 callbacks suppressed Oct 2 19:01:00.816765 kernel: audit: type=1106 audit(1696273260.808:558): pid=1273 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:01:00.816785 kernel: audit: type=1104 audit(1696273260.808:559): pid=1273 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:01:00.808000 audit[1273]: CRED_DISP pid=1273 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:01:00.817992 kernel: audit: type=1106 audit(1696273260.814:560): pid=1268 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:01:00.814000 audit[1268]: USER_END pid=1268 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:01:00.818397 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:01:00.819158 systemd-logind[1138]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:01:00.822022 kernel: audit: type=1104 audit(1696273260.814:561): pid=1268 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:01:00.814000 audit[1268]: CRED_DISP pid=1268 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:01:00.824030 systemd[1]: sshd@6-10.0.0.82:22-10.0.0.1:58076.service: Deactivated successfully. Oct 2 19:01:00.824615 kernel: audit: type=1131 audit(1696273260.820:562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.82:22-10.0.0.1:58076 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:00.820000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.82:22-10.0.0.1:58076 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:00.825273 systemd-logind[1138]: Removed session 7. Oct 2 19:01:00.859025 kubelet[1448]: E1002 19:01:00.858975 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:00.959085 kubelet[1448]: E1002 19:01:00.959042 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:01.060364 kubelet[1448]: E1002 19:01:01.060251 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:01.160818 kubelet[1448]: E1002 19:01:01.160783 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:01.261789 kubelet[1448]: E1002 19:01:01.261745 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:01.362311 kubelet[1448]: E1002 19:01:01.362229 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:01.462739 kubelet[1448]: E1002 19:01:01.462705 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:01.563350 kubelet[1448]: E1002 19:01:01.563302 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:01.663915 kubelet[1448]: E1002 19:01:01.663826 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:01.764691 kubelet[1448]: E1002 19:01:01.764640 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:01.769969 kubelet[1448]: E1002 19:01:01.769948 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:01.865559 kubelet[1448]: E1002 19:01:01.865526 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:01.966137 kubelet[1448]: E1002 19:01:01.966046 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:02.066615 kubelet[1448]: E1002 19:01:02.066540 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:02.167016 kubelet[1448]: E1002 19:01:02.166962 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:02.267727 kubelet[1448]: E1002 19:01:02.267603 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:02.368526 kubelet[1448]: E1002 19:01:02.368436 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:02.469021 kubelet[1448]: E1002 19:01:02.468955 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:02.569624 kubelet[1448]: E1002 19:01:02.569491 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:02.670102 kubelet[1448]: E1002 19:01:02.670041 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:02.770848 kubelet[1448]: E1002 19:01:02.770796 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:02.770972 kubelet[1448]: E1002 19:01:02.770887 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:02.812453 kubelet[1448]: E1002 19:01:02.812425 1448 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:01:02.871243 kubelet[1448]: E1002 19:01:02.871140 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:02.971739 kubelet[1448]: E1002 19:01:02.971677 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:03.072249 kubelet[1448]: E1002 19:01:03.072197 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:03.172832 kubelet[1448]: E1002 19:01:03.172694 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:03.273429 kubelet[1448]: E1002 19:01:03.273365 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:03.373943 kubelet[1448]: E1002 19:01:03.373887 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:03.474683 kubelet[1448]: E1002 19:01:03.474555 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:03.574883 kubelet[1448]: E1002 19:01:03.574831 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:03.675297 kubelet[1448]: E1002 19:01:03.675253 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:03.771960 kubelet[1448]: E1002 19:01:03.771822 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:03.776045 kubelet[1448]: E1002 19:01:03.776016 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:03.876168 kubelet[1448]: E1002 19:01:03.876108 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:03.976800 kubelet[1448]: E1002 19:01:03.976738 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:04.077286 kubelet[1448]: E1002 19:01:04.077161 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:04.178259 kubelet[1448]: E1002 19:01:04.178200 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:04.278899 kubelet[1448]: E1002 19:01:04.278840 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:04.379344 kubelet[1448]: E1002 19:01:04.379193 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:04.479697 kubelet[1448]: E1002 19:01:04.479640 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:04.580200 kubelet[1448]: E1002 19:01:04.580135 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:04.680710 kubelet[1448]: E1002 19:01:04.680588 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:04.772292 kubelet[1448]: E1002 19:01:04.772234 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:04.781766 kubelet[1448]: E1002 19:01:04.781553 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:04.882778 kubelet[1448]: E1002 19:01:04.881934 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:04.982802 kubelet[1448]: E1002 19:01:04.982647 1448 kubelet.go:2448] "Error getting node" err="node \"10.0.0.82\" not found" Oct 2 19:01:05.083331 kubelet[1448]: I1002 19:01:05.083275 1448 kuberuntime_manager.go:1050] "Updating runtime config through cri with podcidr" CIDR="192.168.1.0/24" Oct 2 19:01:05.083813 env[1147]: time="2023-10-02T19:01:05.083757938Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:01:05.084380 kubelet[1448]: I1002 19:01:05.084005 1448 kubelet_network.go:60] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.1.0/24" Oct 2 19:01:05.084380 kubelet[1448]: E1002 19:01:05.084290 1448 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:01:05.773168 kubelet[1448]: E1002 19:01:05.773094 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:05.773168 kubelet[1448]: I1002 19:01:05.773154 1448 apiserver.go:52] "Watching apiserver" Oct 2 19:01:05.776144 kubelet[1448]: I1002 19:01:05.776109 1448 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:01:05.776248 kubelet[1448]: I1002 19:01:05.776183 1448 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:01:05.776248 kubelet[1448]: I1002 19:01:05.776226 1448 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:01:05.781447 systemd[1]: Created slice kubepods-besteffort-podcd46474a_c6ca_4a6c_8940_24ca37fc4fd8.slice. Oct 2 19:01:05.798522 systemd[1]: Created slice kubepods-besteffort-pod55a4d25f_5a88_4645_98e9_4f3540ce9cca.slice. Oct 2 19:01:05.809756 systemd[1]: Created slice kubepods-besteffort-pod112b0880_fe3a_4fc1_b278_747a37e10a57.slice. Oct 2 19:01:05.887541 kubelet[1448]: I1002 19:01:05.887477 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/cd46474a-c6ca-4a6c-8940-24ca37fc4fd8-kube-proxy\") pod \"kube-proxy-g2bfh\" (UID: \"cd46474a-c6ca-4a6c-8940-24ca37fc4fd8\") " pod="kube-system/kube-proxy-g2bfh" Oct 2 19:01:05.887541 kubelet[1448]: I1002 19:01:05.887540 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/112b0880-fe3a-4fc1-b278-747a37e10a57-node-certs\") pod \"calico-node-bct7q\" (UID: \"112b0880-fe3a-4fc1-b278-747a37e10a57\") " pod="calico-system/calico-node-bct7q" Oct 2 19:01:05.887696 kubelet[1448]: I1002 19:01:05.887567 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/112b0880-fe3a-4fc1-b278-747a37e10a57-var-run-calico\") pod \"calico-node-bct7q\" (UID: \"112b0880-fe3a-4fc1-b278-747a37e10a57\") " pod="calico-system/calico-node-bct7q" Oct 2 19:01:05.887696 kubelet[1448]: I1002 19:01:05.887598 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/112b0880-fe3a-4fc1-b278-747a37e10a57-cni-net-dir\") pod \"calico-node-bct7q\" (UID: \"112b0880-fe3a-4fc1-b278-747a37e10a57\") " pod="calico-system/calico-node-bct7q" Oct 2 19:01:05.887696 kubelet[1448]: I1002 19:01:05.887622 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/112b0880-fe3a-4fc1-b278-747a37e10a57-cni-log-dir\") pod \"calico-node-bct7q\" (UID: \"112b0880-fe3a-4fc1-b278-747a37e10a57\") " pod="calico-system/calico-node-bct7q" Oct 2 19:01:05.887696 kubelet[1448]: I1002 19:01:05.887643 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/55a4d25f-5a88-4645-98e9-4f3540ce9cca-var-lib-calico\") pod \"tigera-operator-64db64cb98-p79r7\" (UID: \"55a4d25f-5a88-4645-98e9-4f3540ce9cca\") " pod="tigera-operator/tigera-operator-64db64cb98-p79r7" Oct 2 19:01:05.887807 kubelet[1448]: I1002 19:01:05.887731 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/cd46474a-c6ca-4a6c-8940-24ca37fc4fd8-xtables-lock\") pod \"kube-proxy-g2bfh\" (UID: \"cd46474a-c6ca-4a6c-8940-24ca37fc4fd8\") " pod="kube-system/kube-proxy-g2bfh" Oct 2 19:01:05.887807 kubelet[1448]: I1002 19:01:05.887765 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/112b0880-fe3a-4fc1-b278-747a37e10a57-tigera-ca-bundle\") pod \"calico-node-bct7q\" (UID: \"112b0880-fe3a-4fc1-b278-747a37e10a57\") " pod="calico-system/calico-node-bct7q" Oct 2 19:01:05.887807 kubelet[1448]: I1002 19:01:05.887799 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/112b0880-fe3a-4fc1-b278-747a37e10a57-var-lib-calico\") pod \"calico-node-bct7q\" (UID: \"112b0880-fe3a-4fc1-b278-747a37e10a57\") " pod="calico-system/calico-node-bct7q" Oct 2 19:01:05.887874 kubelet[1448]: I1002 19:01:05.887825 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nc9fh\" (UniqueName: \"kubernetes.io/projected/55a4d25f-5a88-4645-98e9-4f3540ce9cca-kube-api-access-nc9fh\") pod \"tigera-operator-64db64cb98-p79r7\" (UID: \"55a4d25f-5a88-4645-98e9-4f3540ce9cca\") " pod="tigera-operator/tigera-operator-64db64cb98-p79r7" Oct 2 19:01:05.887874 kubelet[1448]: I1002 19:01:05.887845 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kjbnh\" (UniqueName: \"kubernetes.io/projected/cd46474a-c6ca-4a6c-8940-24ca37fc4fd8-kube-api-access-kjbnh\") pod \"kube-proxy-g2bfh\" (UID: \"cd46474a-c6ca-4a6c-8940-24ca37fc4fd8\") " pod="kube-system/kube-proxy-g2bfh" Oct 2 19:01:05.887874 kubelet[1448]: I1002 19:01:05.887864 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/112b0880-fe3a-4fc1-b278-747a37e10a57-policysync\") pod \"calico-node-bct7q\" (UID: \"112b0880-fe3a-4fc1-b278-747a37e10a57\") " pod="calico-system/calico-node-bct7q" Oct 2 19:01:05.887943 kubelet[1448]: I1002 19:01:05.887894 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wxvx2\" (UniqueName: \"kubernetes.io/projected/112b0880-fe3a-4fc1-b278-747a37e10a57-kube-api-access-wxvx2\") pod \"calico-node-bct7q\" (UID: \"112b0880-fe3a-4fc1-b278-747a37e10a57\") " pod="calico-system/calico-node-bct7q" Oct 2 19:01:05.887943 kubelet[1448]: I1002 19:01:05.887916 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/112b0880-fe3a-4fc1-b278-747a37e10a57-cni-bin-dir\") pod \"calico-node-bct7q\" (UID: \"112b0880-fe3a-4fc1-b278-747a37e10a57\") " pod="calico-system/calico-node-bct7q" Oct 2 19:01:05.887986 kubelet[1448]: I1002 19:01:05.887943 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/112b0880-fe3a-4fc1-b278-747a37e10a57-flexvol-driver-host\") pod \"calico-node-bct7q\" (UID: \"112b0880-fe3a-4fc1-b278-747a37e10a57\") " pod="calico-system/calico-node-bct7q" Oct 2 19:01:05.887986 kubelet[1448]: I1002 19:01:05.887983 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/cd46474a-c6ca-4a6c-8940-24ca37fc4fd8-lib-modules\") pod \"kube-proxy-g2bfh\" (UID: \"cd46474a-c6ca-4a6c-8940-24ca37fc4fd8\") " pod="kube-system/kube-proxy-g2bfh" Oct 2 19:01:05.888037 kubelet[1448]: I1002 19:01:05.888005 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/112b0880-fe3a-4fc1-b278-747a37e10a57-lib-modules\") pod \"calico-node-bct7q\" (UID: \"112b0880-fe3a-4fc1-b278-747a37e10a57\") " pod="calico-system/calico-node-bct7q" Oct 2 19:01:05.888037 kubelet[1448]: I1002 19:01:05.888037 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/112b0880-fe3a-4fc1-b278-747a37e10a57-xtables-lock\") pod \"calico-node-bct7q\" (UID: \"112b0880-fe3a-4fc1-b278-747a37e10a57\") " pod="calico-system/calico-node-bct7q" Oct 2 19:01:05.888085 kubelet[1448]: I1002 19:01:05.888053 1448 reconciler.go:169] "Reconciler: start to sync state" Oct 2 19:01:05.990140 kubelet[1448]: E1002 19:01:05.990103 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:05.990140 kubelet[1448]: W1002 19:01:05.990124 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:05.990140 kubelet[1448]: E1002 19:01:05.990144 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:05.995960 kubelet[1448]: E1002 19:01:05.995861 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:05.995960 kubelet[1448]: W1002 19:01:05.995880 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:05.995960 kubelet[1448]: E1002 19:01:05.995898 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:06.089623 kubelet[1448]: E1002 19:01:06.089498 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:06.089623 kubelet[1448]: W1002 19:01:06.089537 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:06.089623 kubelet[1448]: E1002 19:01:06.089558 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:06.089788 kubelet[1448]: E1002 19:01:06.089756 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:06.089788 kubelet[1448]: W1002 19:01:06.089765 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:06.089788 kubelet[1448]: E1002 19:01:06.089776 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:06.090027 kubelet[1448]: E1002 19:01:06.089907 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:06.090027 kubelet[1448]: W1002 19:01:06.089919 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:06.090027 kubelet[1448]: E1002 19:01:06.089929 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:06.190853 kubelet[1448]: E1002 19:01:06.190680 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:06.190853 kubelet[1448]: W1002 19:01:06.190701 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:06.190853 kubelet[1448]: E1002 19:01:06.190723 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:06.191282 kubelet[1448]: E1002 19:01:06.191132 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:06.191282 kubelet[1448]: W1002 19:01:06.191149 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:06.191282 kubelet[1448]: E1002 19:01:06.191166 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:06.191585 kubelet[1448]: E1002 19:01:06.191470 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:06.191585 kubelet[1448]: W1002 19:01:06.191487 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:06.191585 kubelet[1448]: E1002 19:01:06.191500 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:06.292561 kubelet[1448]: E1002 19:01:06.292522 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:06.292561 kubelet[1448]: W1002 19:01:06.292552 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:06.292561 kubelet[1448]: E1002 19:01:06.292573 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:06.292779 kubelet[1448]: E1002 19:01:06.292739 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:06.292779 kubelet[1448]: W1002 19:01:06.292748 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:06.292779 kubelet[1448]: E1002 19:01:06.292762 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:06.292944 kubelet[1448]: E1002 19:01:06.292924 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:06.292944 kubelet[1448]: W1002 19:01:06.292935 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:06.292944 kubelet[1448]: E1002 19:01:06.292947 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:06.388491 kubelet[1448]: E1002 19:01:06.388343 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:06.388491 kubelet[1448]: W1002 19:01:06.388361 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:06.388491 kubelet[1448]: E1002 19:01:06.388378 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:06.393723 kubelet[1448]: E1002 19:01:06.393698 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:06.393723 kubelet[1448]: W1002 19:01:06.393717 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:06.393887 kubelet[1448]: E1002 19:01:06.393742 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:06.394229 kubelet[1448]: E1002 19:01:06.394211 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:06.394288 kubelet[1448]: W1002 19:01:06.394227 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:06.394288 kubelet[1448]: E1002 19:01:06.394247 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:06.396213 kubelet[1448]: E1002 19:01:06.396191 1448 dns.go:157] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:01:06.397252 env[1147]: time="2023-10-02T19:01:06.397189898Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-g2bfh,Uid:cd46474a-c6ca-4a6c-8940-24ca37fc4fd8,Namespace:kube-system,Attempt:0,}" Oct 2 19:01:06.494934 kubelet[1448]: E1002 19:01:06.494893 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:06.494934 kubelet[1448]: W1002 19:01:06.494914 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:06.494934 kubelet[1448]: E1002 19:01:06.494933 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:06.495151 kubelet[1448]: E1002 19:01:06.495133 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:06.495151 kubelet[1448]: W1002 19:01:06.495144 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:06.495209 kubelet[1448]: E1002 19:01:06.495157 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:06.590695 kubelet[1448]: E1002 19:01:06.590656 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:06.590695 kubelet[1448]: W1002 19:01:06.590681 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:06.590903 kubelet[1448]: E1002 19:01:06.590707 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:06.596247 kubelet[1448]: E1002 19:01:06.596212 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:06.596247 kubelet[1448]: W1002 19:01:06.596232 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:06.596247 kubelet[1448]: E1002 19:01:06.596249 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:06.697604 kubelet[1448]: E1002 19:01:06.697469 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:06.697604 kubelet[1448]: W1002 19:01:06.697489 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:06.697604 kubelet[1448]: E1002 19:01:06.697525 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:06.702047 env[1147]: time="2023-10-02T19:01:06.701998178Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-64db64cb98-p79r7,Uid:55a4d25f-5a88-4645-98e9-4f3540ce9cca,Namespace:tigera-operator,Attempt:0,}" Oct 2 19:01:06.774175 kubelet[1448]: E1002 19:01:06.774125 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:06.789283 kubelet[1448]: E1002 19:01:06.789247 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:06.789283 kubelet[1448]: W1002 19:01:06.789267 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:06.789283 kubelet[1448]: E1002 19:01:06.789286 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:07.012026 kubelet[1448]: E1002 19:01:07.011940 1448 dns.go:157] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:01:07.012777 env[1147]: time="2023-10-02T19:01:07.012727538Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-bct7q,Uid:112b0880-fe3a-4fc1-b278-747a37e10a57,Namespace:calico-system,Attempt:0,}" Oct 2 19:01:07.019949 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount716340516.mount: Deactivated successfully. Oct 2 19:01:07.024410 env[1147]: time="2023-10-02T19:01:07.024376778Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:07.027012 env[1147]: time="2023-10-02T19:01:07.026965138Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:07.033146 env[1147]: time="2023-10-02T19:01:07.033114018Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:07.034019 env[1147]: time="2023-10-02T19:01:07.033987978Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:07.036113 env[1147]: time="2023-10-02T19:01:07.036083098Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:07.041040 env[1147]: time="2023-10-02T19:01:07.041002458Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:07.043768 env[1147]: time="2023-10-02T19:01:07.043714658Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:07.045301 env[1147]: time="2023-10-02T19:01:07.045269138Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:07.093029 env[1147]: time="2023-10-02T19:01:07.092957858Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:01:07.093190 env[1147]: time="2023-10-02T19:01:07.093000298Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:01:07.093190 env[1147]: time="2023-10-02T19:01:07.093021378Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:01:07.094016 env[1147]: time="2023-10-02T19:01:07.093887938Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7c04122baea76215193afe14b1c6e718a04d59616ac714d8e492580294f1e572 pid=1571 runtime=io.containerd.runc.v2 Oct 2 19:01:07.105198 env[1147]: time="2023-10-02T19:01:07.100391778Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:01:07.105198 env[1147]: time="2023-10-02T19:01:07.100529178Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:01:07.105198 env[1147]: time="2023-10-02T19:01:07.100541058Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:01:07.105198 env[1147]: time="2023-10-02T19:01:07.100685258Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c02814764b5722a5941693b67df4591c8851d885ee5f6be82d83353cdd896d1b pid=1583 runtime=io.containerd.runc.v2 Oct 2 19:01:07.110867 env[1147]: time="2023-10-02T19:01:07.110820098Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:07.112295 env[1147]: time="2023-10-02T19:01:07.112205698Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:07.113952 env[1147]: time="2023-10-02T19:01:07.113918298Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:07.118762 env[1147]: time="2023-10-02T19:01:07.118715178Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:07.133948 systemd[1]: Started cri-containerd-7c04122baea76215193afe14b1c6e718a04d59616ac714d8e492580294f1e572.scope. Oct 2 19:01:07.134859 systemd[1]: Started cri-containerd-c02814764b5722a5941693b67df4591c8851d885ee5f6be82d83353cdd896d1b.scope. Oct 2 19:01:07.157888 env[1147]: time="2023-10-02T19:01:07.157598218Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:01:07.157888 env[1147]: time="2023-10-02T19:01:07.157647298Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:01:07.157888 env[1147]: time="2023-10-02T19:01:07.157668218Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:01:07.162906 env[1147]: time="2023-10-02T19:01:07.162797218Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8ade5248319f562d67778966844bf0a9bc42ff259f92c989352c4d81b0eeb26e pid=1618 runtime=io.containerd.runc.v2 Oct 2 19:01:07.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.189999 kernel: audit: type=1400 audit(1696273267.183:563): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190158 kernel: audit: type=1400 audit(1696273267.183:564): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190191 kernel: audit: type=1400 audit(1696273267.183:565): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190981 systemd[1]: Started cri-containerd-8ade5248319f562d67778966844bf0a9bc42ff259f92c989352c4d81b0eeb26e.scope. Oct 2 19:01:07.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.194679 kernel: audit: type=1400 audit(1696273267.183:566): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.194773 kernel: audit: type=1400 audit(1696273267.183:567): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.194798 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:01:07.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.195523 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:01:07.195572 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:01:07.195598 kernel: audit: backlog limit exceeded Oct 2 19:01:07.195613 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:01:07.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.185000 audit: BPF prog-id=61 op=LOAD Oct 2 19:01:07.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.188000 audit: BPF prog-id=62 op=LOAD Oct 2 19:01:07.189000 audit[1584]: AVC avc: denied { bpf } for pid=1584 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.189000 audit[1584]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1571 pid=1584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:07.189000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763303431323262616561373632313531393361666531346231633665 Oct 2 19:01:07.189000 audit[1584]: AVC avc: denied { perfmon } for pid=1584 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.189000 audit[1584]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1571 pid=1584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:07.189000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763303431323262616561373632313531393361666531346231633665 Oct 2 19:01:07.189000 audit[1584]: AVC avc: denied { bpf } for pid=1584 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.189000 audit[1584]: AVC avc: denied { bpf } for pid=1584 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.189000 audit[1584]: AVC avc: denied { bpf } for pid=1584 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.189000 audit[1584]: AVC avc: denied { perfmon } for pid=1584 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.189000 audit[1584]: AVC avc: denied { perfmon } for pid=1584 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.189000 audit[1584]: AVC avc: denied { perfmon } for pid=1584 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.189000 audit[1584]: AVC avc: denied { perfmon } for pid=1584 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.189000 audit[1584]: AVC avc: denied { perfmon } for pid=1584 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.189000 audit[1584]: AVC avc: denied { bpf } for pid=1584 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190000 audit[1594]: AVC avc: denied { bpf } for pid=1594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190000 audit[1594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1583 pid=1594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:07.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330323831343736346235373232613539343136393362363764663435 Oct 2 19:01:07.190000 audit[1594]: AVC avc: denied { perfmon } for pid=1594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190000 audit[1594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1583 pid=1594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:07.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330323831343736346235373232613539343136393362363764663435 Oct 2 19:01:07.189000 audit[1584]: AVC avc: denied { bpf } for pid=1584 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.189000 audit: BPF prog-id=63 op=LOAD Oct 2 19:01:07.189000 audit[1584]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1571 pid=1584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:07.189000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763303431323262616561373632313531393361666531346231633665 Oct 2 19:01:07.190000 audit[1584]: AVC avc: denied { bpf } for pid=1584 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190000 audit[1584]: AVC avc: denied { bpf } for pid=1584 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190000 audit[1584]: AVC avc: denied { perfmon } for pid=1584 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190000 audit[1584]: AVC avc: denied { perfmon } for pid=1584 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190000 audit[1584]: AVC avc: denied { perfmon } for pid=1584 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190000 audit[1584]: AVC avc: denied { perfmon } for pid=1584 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190000 audit[1584]: AVC avc: denied { perfmon } for pid=1584 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190000 audit[1584]: AVC avc: denied { bpf } for pid=1584 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190000 audit[1594]: AVC avc: denied { bpf } for pid=1594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190000 audit[1594]: AVC avc: denied { bpf } for pid=1594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190000 audit[1594]: AVC avc: denied { bpf } for pid=1594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190000 audit[1594]: AVC avc: denied { perfmon } for pid=1594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190000 audit[1594]: AVC avc: denied { perfmon } for pid=1594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190000 audit[1594]: AVC avc: denied { perfmon } for pid=1594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190000 audit[1594]: AVC avc: denied { perfmon } for pid=1594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190000 audit[1594]: AVC avc: denied { perfmon } for pid=1594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190000 audit[1594]: AVC avc: denied { bpf } for pid=1594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190000 audit[1584]: AVC avc: denied { bpf } for pid=1584 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.190000 audit[1594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1583 pid=1594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:07.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330323831343736346235373232613539343136393362363764663435 Oct 2 19:01:07.197000 audit[1594]: AVC avc: denied { bpf } for pid=1594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.197000 audit[1594]: AVC avc: denied { bpf } for pid=1594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.197000 audit[1594]: AVC avc: denied { perfmon } for pid=1594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.197000 audit[1594]: AVC avc: denied { perfmon } for pid=1594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.197000 audit[1594]: AVC avc: denied { perfmon } for pid=1594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.197000 audit[1594]: AVC avc: denied { perfmon } for pid=1594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.197000 audit[1594]: AVC avc: denied { perfmon } for pid=1594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.197000 audit[1594]: AVC avc: denied { bpf } for pid=1594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.197000 audit[1594]: AVC avc: denied { bpf } for pid=1594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.197000 audit: BPF prog-id=66 op=LOAD Oct 2 19:01:07.190000 audit[1584]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1571 pid=1584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:07.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763303431323262616561373632313531393361666531346231633665 Oct 2 19:01:07.197000 audit[1594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1583 pid=1594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:07.197000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330323831343736346235373232613539343136393362363764663435 Oct 2 19:01:07.198000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:01:07.198000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:01:07.198000 audit[1584]: AVC avc: denied { bpf } for pid=1584 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.198000 audit[1584]: AVC avc: denied { bpf } for pid=1584 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.198000 audit[1584]: AVC avc: denied { bpf } for pid=1584 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.198000 audit[1584]: AVC avc: denied { perfmon } for pid=1584 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.198000 audit[1584]: AVC avc: denied { perfmon } for pid=1584 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.198000 audit[1584]: AVC avc: denied { perfmon } for pid=1584 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.198000 audit[1584]: AVC avc: denied { perfmon } for pid=1584 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.198000 audit[1584]: AVC avc: denied { perfmon } for pid=1584 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.198000 audit[1584]: AVC avc: denied { bpf } for pid=1584 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.198000 audit[1584]: AVC avc: denied { bpf } for pid=1584 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.198000 audit: BPF prog-id=67 op=LOAD Oct 2 19:01:07.198000 audit[1584]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1571 pid=1584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:07.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763303431323262616561373632313531393361666531346231633665 Oct 2 19:01:07.201000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:01:07.201000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:01:07.201000 audit[1594]: AVC avc: denied { bpf } for pid=1594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.201000 audit[1594]: AVC avc: denied { bpf } for pid=1594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.201000 audit[1594]: AVC avc: denied { bpf } for pid=1594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.201000 audit[1594]: AVC avc: denied { perfmon } for pid=1594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.201000 audit[1594]: AVC avc: denied { perfmon } for pid=1594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.201000 audit[1594]: AVC avc: denied { perfmon } for pid=1594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.201000 audit[1594]: AVC avc: denied { perfmon } for pid=1594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.201000 audit[1594]: AVC avc: denied { perfmon } for pid=1594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.201000 audit[1594]: AVC avc: denied { bpf } for pid=1594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.201000 audit[1594]: AVC avc: denied { bpf } for pid=1594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.201000 audit: BPF prog-id=68 op=LOAD Oct 2 19:01:07.201000 audit[1594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1583 pid=1594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:07.201000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330323831343736346235373232613539343136393362363764663435 Oct 2 19:01:07.223622 env[1147]: time="2023-10-02T19:01:07.223554818Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-g2bfh,Uid:cd46474a-c6ca-4a6c-8940-24ca37fc4fd8,Namespace:kube-system,Attempt:0,} returns sandbox id \"7c04122baea76215193afe14b1c6e718a04d59616ac714d8e492580294f1e572\"" Oct 2 19:01:07.225067 kubelet[1448]: E1002 19:01:07.224583 1448 dns.go:157] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:01:07.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.226000 audit: BPF prog-id=69 op=LOAD Oct 2 19:01:07.228790 env[1147]: time="2023-10-02T19:01:07.228747698Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.25.14\"" Oct 2 19:01:07.227000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.227000 audit[1642]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000215b38 a2=10 a3=0 items=0 ppid=1618 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:07.227000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861646535323438333139663536326436373737383936363834346266 Oct 2 19:01:07.227000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.227000 audit[1642]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40002155a0 a2=3c a3=0 items=0 ppid=1618 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:07.227000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861646535323438333139663536326436373737383936363834346266 Oct 2 19:01:07.227000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.227000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.227000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.227000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.227000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.227000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.227000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.227000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.227000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.227000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.227000 audit: BPF prog-id=70 op=LOAD Oct 2 19:01:07.227000 audit[1642]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40002158e0 a2=78 a3=0 items=0 ppid=1618 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:07.227000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861646535323438333139663536326436373737383936363834346266 Oct 2 19:01:07.227000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.227000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.227000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.227000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.227000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.227000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.227000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.227000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.227000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.227000 audit: BPF prog-id=71 op=LOAD Oct 2 19:01:07.227000 audit[1642]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000215670 a2=78 a3=0 items=0 ppid=1618 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:07.227000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861646535323438333139663536326436373737383936363834346266 Oct 2 19:01:07.227000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:01:07.227000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:01:07.228000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.228000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.228000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.228000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.228000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.228000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.228000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.228000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.228000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.228000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:07.228000 audit: BPF prog-id=72 op=LOAD Oct 2 19:01:07.228000 audit[1642]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000215b40 a2=78 a3=0 items=0 ppid=1618 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:07.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861646535323438333139663536326436373737383936363834346266 Oct 2 19:01:07.242955 env[1147]: time="2023-10-02T19:01:07.242912498Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-64db64cb98-p79r7,Uid:55a4d25f-5a88-4645-98e9-4f3540ce9cca,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"c02814764b5722a5941693b67df4591c8851d885ee5f6be82d83353cdd896d1b\"" Oct 2 19:01:07.243343 env[1147]: time="2023-10-02T19:01:07.243313698Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-bct7q,Uid:112b0880-fe3a-4fc1-b278-747a37e10a57,Namespace:calico-system,Attempt:0,} returns sandbox id \"8ade5248319f562d67778966844bf0a9bc42ff259f92c989352c4d81b0eeb26e\"" Oct 2 19:01:07.244357 kubelet[1448]: E1002 19:01:07.244223 1448 dns.go:157] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:01:07.760878 kubelet[1448]: E1002 19:01:07.760834 1448 file.go:104] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:07.774557 kubelet[1448]: E1002 19:01:07.774519 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:07.813140 kubelet[1448]: E1002 19:01:07.813113 1448 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:01:08.275608 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3253673617.mount: Deactivated successfully. Oct 2 19:01:08.596812 env[1147]: time="2023-10-02T19:01:08.596707578Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:08.600158 env[1147]: time="2023-10-02T19:01:08.600122578Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:36ad84e6a838b02d80a9db87b13c83185253f647e2af2f58f91ac1346103ff4e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:08.601220 env[1147]: time="2023-10-02T19:01:08.601191178Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:08.603131 env[1147]: time="2023-10-02T19:01:08.603104338Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:4a23f328943342be6a3eeda75cc7a01d175bcf8b096611c97d2aa14c843cf326,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:08.603655 env[1147]: time="2023-10-02T19:01:08.603628098Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.25.14\" returns image reference \"sha256:36ad84e6a838b02d80a9db87b13c83185253f647e2af2f58f91ac1346103ff4e\"" Oct 2 19:01:08.605125 env[1147]: time="2023-10-02T19:01:08.605098738Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\"" Oct 2 19:01:08.606661 env[1147]: time="2023-10-02T19:01:08.606632938Z" level=info msg="CreateContainer within sandbox \"7c04122baea76215193afe14b1c6e718a04d59616ac714d8e492580294f1e572\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:01:08.617014 env[1147]: time="2023-10-02T19:01:08.616968098Z" level=info msg="CreateContainer within sandbox \"7c04122baea76215193afe14b1c6e718a04d59616ac714d8e492580294f1e572\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"6070a990681f1214af80758b71ca64a0c085548e91aea30e58b1d5cff262e138\"" Oct 2 19:01:08.617498 env[1147]: time="2023-10-02T19:01:08.617472538Z" level=info msg="StartContainer for \"6070a990681f1214af80758b71ca64a0c085548e91aea30e58b1d5cff262e138\"" Oct 2 19:01:08.635034 systemd[1]: Started cri-containerd-6070a990681f1214af80758b71ca64a0c085548e91aea30e58b1d5cff262e138.scope. Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=1571 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.658000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630373061393930363831663132313461663830373538623731636136 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit: BPF prog-id=73 op=LOAD Oct 2 19:01:08.658000 audit[1685]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=1571 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.658000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630373061393930363831663132313461663830373538623731636136 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit: BPF prog-id=74 op=LOAD Oct 2 19:01:08.658000 audit[1685]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=1571 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.658000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630373061393930363831663132313461663830373538623731636136 Oct 2 19:01:08.658000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:01:08.658000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:08.658000 audit: BPF prog-id=75 op=LOAD Oct 2 19:01:08.658000 audit[1685]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=1571 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.658000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630373061393930363831663132313461663830373538623731636136 Oct 2 19:01:08.680051 env[1147]: time="2023-10-02T19:01:08.680007218Z" level=info msg="StartContainer for \"6070a990681f1214af80758b71ca64a0c085548e91aea30e58b1d5cff262e138\" returns successfully" Oct 2 19:01:08.740321 kernel: IPVS: Registered protocols (TCP, UDP, SCTP, AH, ESP) Oct 2 19:01:08.740442 kernel: IPVS: Connection hash table configured (size=4096, memory=32Kbytes) Oct 2 19:01:08.740468 kernel: IPVS: ipvs loaded. Oct 2 19:01:08.749545 kernel: IPVS: [rr] scheduler registered. Oct 2 19:01:08.755535 kernel: IPVS: [wrr] scheduler registered. Oct 2 19:01:08.761575 kernel: IPVS: [sh] scheduler registered. Oct 2 19:01:08.775622 kubelet[1448]: E1002 19:01:08.775591 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:08.808000 audit[1745]: NETFILTER_CFG table=mangle:35 family=2 entries=1 op=nft_register_chain pid=1745 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:08.808000 audit[1745]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc1539540 a2=0 a3=ffff8f0d56c0 items=0 ppid=1695 pid=1745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.808000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:01:08.810000 audit[1746]: NETFILTER_CFG table=mangle:36 family=10 entries=1 op=nft_register_chain pid=1746 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:01:08.810000 audit[1746]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffca7595a0 a2=0 a3=ffff9eed66c0 items=0 ppid=1695 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.810000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:01:08.813000 audit[1747]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_chain pid=1747 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:08.813000 audit[1747]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc8a17a70 a2=0 a3=ffffaf94d6c0 items=0 ppid=1695 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.813000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:01:08.815000 audit[1749]: NETFILTER_CFG table=filter:38 family=2 entries=1 op=nft_register_chain pid=1749 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:08.815000 audit[1749]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff20128e0 a2=0 a3=ffff8c8436c0 items=0 ppid=1695 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.815000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:01:08.815000 audit[1748]: NETFILTER_CFG table=nat:39 family=10 entries=1 op=nft_register_chain pid=1748 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:01:08.815000 audit[1748]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffca5d170 a2=0 a3=ffffa8f166c0 items=0 ppid=1695 pid=1748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.815000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:01:08.817000 audit[1750]: NETFILTER_CFG table=filter:40 family=10 entries=1 op=nft_register_chain pid=1750 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:01:08.817000 audit[1750]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcff69e20 a2=0 a3=ffff885bd6c0 items=0 ppid=1695 pid=1750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.817000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:01:08.911000 audit[1751]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=1751 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:08.911000 audit[1751]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff94f2390 a2=0 a3=ffff92fa86c0 items=0 ppid=1695 pid=1751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.911000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:01:08.917000 audit[1753]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_rule pid=1753 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:08.917000 audit[1753]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc8bcc3f0 a2=0 a3=ffff962bc6c0 items=0 ppid=1695 pid=1753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.917000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:01:08.921000 audit[1756]: NETFILTER_CFG table=filter:43 family=2 entries=2 op=nft_register_chain pid=1756 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:08.921000 audit[1756]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc9d1dc20 a2=0 a3=ffffb75e76c0 items=0 ppid=1695 pid=1756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.921000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:01:08.922000 audit[1757]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=1757 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:08.922000 audit[1757]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc5350640 a2=0 a3=ffff9ed526c0 items=0 ppid=1695 pid=1757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.922000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:01:08.925000 audit[1759]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=1759 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:08.925000 audit[1759]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd8edabc0 a2=0 a3=ffffb67996c0 items=0 ppid=1695 pid=1759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.925000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:01:08.926000 audit[1760]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_chain pid=1760 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:08.926000 audit[1760]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe1df1880 a2=0 a3=ffffb0a686c0 items=0 ppid=1695 pid=1760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.926000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:01:08.929000 audit[1762]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_rule pid=1762 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:08.929000 audit[1762]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff8c8be70 a2=0 a3=ffffa45866c0 items=0 ppid=1695 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.929000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:01:08.933000 audit[1765]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=1765 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:08.933000 audit[1765]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe28a1180 a2=0 a3=ffffae7eb6c0 items=0 ppid=1695 pid=1765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.933000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:01:08.934000 audit[1766]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=1766 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:08.934000 audit[1766]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc4a7b6c0 a2=0 a3=ffff845fa6c0 items=0 ppid=1695 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.934000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:01:08.936000 audit[1768]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=1768 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:08.936000 audit[1768]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffef27fea0 a2=0 a3=ffff8a62c6c0 items=0 ppid=1695 pid=1768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.936000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:01:08.938000 audit[1769]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_chain pid=1769 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:08.938000 audit[1769]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffca14eae0 a2=0 a3=ffff9f8276c0 items=0 ppid=1695 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.938000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:01:08.941000 audit[1771]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_rule pid=1771 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:08.941000 audit[1771]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe6c7c9a0 a2=0 a3=ffffbb8366c0 items=0 ppid=1695 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.941000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:01:08.945000 audit[1774]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=1774 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:08.945000 audit[1774]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe8689fc0 a2=0 a3=ffff9a7a66c0 items=0 ppid=1695 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.945000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:01:08.953000 audit[1777]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_rule pid=1777 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:08.953000 audit[1777]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc0e80ad0 a2=0 a3=ffffad5326c0 items=0 ppid=1695 pid=1777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.953000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:01:08.954000 audit[1778]: NETFILTER_CFG table=nat:55 family=2 entries=1 op=nft_register_chain pid=1778 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:08.954000 audit[1778]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff9604560 a2=0 a3=ffffa553d6c0 items=0 ppid=1695 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.954000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:01:08.958000 audit[1780]: NETFILTER_CFG table=nat:56 family=2 entries=2 op=nft_register_chain pid=1780 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:08.958000 audit[1780]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffe86ddf00 a2=0 a3=ffff86bf06c0 items=0 ppid=1695 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.958000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:01:08.963000 audit[1783]: NETFILTER_CFG table=nat:57 family=2 entries=2 op=nft_register_chain pid=1783 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:08.963000 audit[1783]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffe06a1f70 a2=0 a3=ffff8b2fc6c0 items=0 ppid=1695 pid=1783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.963000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:01:08.994000 audit[1787]: NETFILTER_CFG table=filter:58 family=2 entries=6 op=nft_register_rule pid=1787 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:01:08.994000 audit[1787]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4028 a0=3 a1=ffffe9e404f0 a2=0 a3=ffff864916c0 items=0 ppid=1695 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:08.994000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:01:09.012000 audit[1787]: NETFILTER_CFG table=nat:59 family=2 entries=24 op=nft_register_chain pid=1787 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:01:09.012000 audit[1787]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8836 a0=3 a1=ffffe9e404f0 a2=0 a3=ffff864916c0 items=0 ppid=1695 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:09.012000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:01:09.014000 audit[1791]: NETFILTER_CFG table=filter:60 family=10 entries=1 op=nft_register_chain pid=1791 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:01:09.014000 audit[1791]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffeb049580 a2=0 a3=ffff8bf766c0 items=0 ppid=1695 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:09.014000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:01:09.018132 kubelet[1448]: E1002 19:01:09.018087 1448 dns.go:157] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:01:09.019000 audit[1793]: NETFILTER_CFG table=filter:61 family=10 entries=2 op=nft_register_chain pid=1793 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:01:09.019000 audit[1793]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff2ce09c0 a2=0 a3=ffffb96dc6c0 items=0 ppid=1695 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:09.019000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:01:09.025000 audit[1796]: NETFILTER_CFG table=filter:62 family=10 entries=2 op=nft_register_chain pid=1796 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:01:09.025000 audit[1796]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd39d25d0 a2=0 a3=ffff8bd5b6c0 items=0 ppid=1695 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:09.025000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:01:09.027000 audit[1797]: NETFILTER_CFG table=filter:63 family=10 entries=1 op=nft_register_chain pid=1797 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:01:09.027000 audit[1797]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff1c0d7f0 a2=0 a3=ffffb106b6c0 items=0 ppid=1695 pid=1797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:09.027000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:01:09.030000 audit[1799]: NETFILTER_CFG table=filter:64 family=10 entries=1 op=nft_register_rule pid=1799 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:01:09.030000 audit[1799]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc2cf37d0 a2=0 a3=ffff9b3bd6c0 items=0 ppid=1695 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:09.030000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:01:09.031000 audit[1800]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=1800 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:01:09.031000 audit[1800]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdb3d7d50 a2=0 a3=ffff8f67d6c0 items=0 ppid=1695 pid=1800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:09.031000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:01:09.033000 audit[1802]: NETFILTER_CFG table=filter:66 family=10 entries=1 op=nft_register_rule pid=1802 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:01:09.033000 audit[1802]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffffa8ffa0 a2=0 a3=ffff9ee4c6c0 items=0 ppid=1695 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:09.033000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:01:09.037000 audit[1805]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=1805 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:01:09.037000 audit[1805]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffffee0fd90 a2=0 a3=ffff828dc6c0 items=0 ppid=1695 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:09.037000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:01:09.044000 audit[1806]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=1806 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:01:09.044000 audit[1806]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd9b01bb0 a2=0 a3=ffff9ea846c0 items=0 ppid=1695 pid=1806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:09.044000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:01:09.046000 audit[1808]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=1808 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:01:09.046000 audit[1808]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe85d14f0 a2=0 a3=ffffa4ff86c0 items=0 ppid=1695 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:09.046000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:01:09.047000 audit[1809]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=1809 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:01:09.047000 audit[1809]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe61b8550 a2=0 a3=ffff82ffd6c0 items=0 ppid=1695 pid=1809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:09.047000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:01:09.050000 audit[1811]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=1811 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:01:09.050000 audit[1811]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd684ddd0 a2=0 a3=ffff992fe6c0 items=0 ppid=1695 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:09.050000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:01:09.054000 audit[1814]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_rule pid=1814 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:01:09.054000 audit[1814]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcae12e60 a2=0 a3=ffffa96246c0 items=0 ppid=1695 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:09.054000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:01:09.057000 audit[1817]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_rule pid=1817 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:01:09.057000 audit[1817]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcf8d1ac0 a2=0 a3=ffffb75aa6c0 items=0 ppid=1695 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:09.057000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:01:09.058000 audit[1818]: NETFILTER_CFG table=nat:74 family=10 entries=1 op=nft_register_chain pid=1818 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:01:09.058000 audit[1818]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffdf9e1f00 a2=0 a3=ffffaeb746c0 items=0 ppid=1695 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:09.058000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:01:09.061000 audit[1820]: NETFILTER_CFG table=nat:75 family=10 entries=2 op=nft_register_chain pid=1820 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:01:09.061000 audit[1820]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffff7307320 a2=0 a3=ffff814376c0 items=0 ppid=1695 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:09.061000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:01:09.065000 audit[1823]: NETFILTER_CFG table=nat:76 family=10 entries=2 op=nft_register_chain pid=1823 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:01:09.065000 audit[1823]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffdbd86c10 a2=0 a3=ffffb85296c0 items=0 ppid=1695 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:09.065000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:01:09.071000 audit[1827]: NETFILTER_CFG table=filter:77 family=10 entries=3 op=nft_register_rule pid=1827 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:01:09.071000 audit[1827]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffe42670f0 a2=0 a3=ffff8e1066c0 items=0 ppid=1695 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:09.071000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:01:09.071000 audit[1827]: NETFILTER_CFG table=nat:78 family=10 entries=10 op=nft_register_chain pid=1827 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:01:09.071000 audit[1827]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1860 a0=3 a1=ffffe42670f0 a2=0 a3=ffff8e1066c0 items=0 ppid=1695 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:09.071000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:01:09.089498 kubelet[1448]: E1002 19:01:09.089468 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.089498 kubelet[1448]: W1002 19:01:09.089491 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.089627 kubelet[1448]: E1002 19:01:09.089524 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.089736 kubelet[1448]: E1002 19:01:09.089719 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.089791 kubelet[1448]: W1002 19:01:09.089736 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.089791 kubelet[1448]: E1002 19:01:09.089748 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.089901 kubelet[1448]: E1002 19:01:09.089891 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.089932 kubelet[1448]: W1002 19:01:09.089901 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.089932 kubelet[1448]: E1002 19:01:09.089914 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.090088 kubelet[1448]: E1002 19:01:09.090076 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.090088 kubelet[1448]: W1002 19:01:09.090087 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.090159 kubelet[1448]: E1002 19:01:09.090098 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.090229 kubelet[1448]: E1002 19:01:09.090220 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.090229 kubelet[1448]: W1002 19:01:09.090229 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.090297 kubelet[1448]: E1002 19:01:09.090239 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.090373 kubelet[1448]: E1002 19:01:09.090364 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.090373 kubelet[1448]: W1002 19:01:09.090373 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.090430 kubelet[1448]: E1002 19:01:09.090382 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.090542 kubelet[1448]: E1002 19:01:09.090532 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.090572 kubelet[1448]: W1002 19:01:09.090544 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.090572 kubelet[1448]: E1002 19:01:09.090554 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.090680 kubelet[1448]: E1002 19:01:09.090669 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.090680 kubelet[1448]: W1002 19:01:09.090679 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.090761 kubelet[1448]: E1002 19:01:09.090689 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.090827 kubelet[1448]: E1002 19:01:09.090817 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.090827 kubelet[1448]: W1002 19:01:09.090826 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.090875 kubelet[1448]: E1002 19:01:09.090835 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.091033 kubelet[1448]: E1002 19:01:09.091023 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.091033 kubelet[1448]: W1002 19:01:09.091033 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.091109 kubelet[1448]: E1002 19:01:09.091043 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.091175 kubelet[1448]: E1002 19:01:09.091165 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.091175 kubelet[1448]: W1002 19:01:09.091175 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.091244 kubelet[1448]: E1002 19:01:09.091184 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.091314 kubelet[1448]: E1002 19:01:09.091305 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.091314 kubelet[1448]: W1002 19:01:09.091314 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.091388 kubelet[1448]: E1002 19:01:09.091323 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.091454 kubelet[1448]: E1002 19:01:09.091445 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.091454 kubelet[1448]: W1002 19:01:09.091454 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.091523 kubelet[1448]: E1002 19:01:09.091463 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.091603 kubelet[1448]: E1002 19:01:09.091593 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.091642 kubelet[1448]: W1002 19:01:09.091603 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.091642 kubelet[1448]: E1002 19:01:09.091613 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.091772 kubelet[1448]: E1002 19:01:09.091761 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.091772 kubelet[1448]: W1002 19:01:09.091772 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.091829 kubelet[1448]: E1002 19:01:09.091782 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.091917 kubelet[1448]: E1002 19:01:09.091908 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.091917 kubelet[1448]: W1002 19:01:09.091917 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.091973 kubelet[1448]: E1002 19:01:09.091928 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.115492 kubelet[1448]: E1002 19:01:09.115367 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.115492 kubelet[1448]: W1002 19:01:09.115387 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.115492 kubelet[1448]: E1002 19:01:09.115403 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.115638 kubelet[1448]: E1002 19:01:09.115610 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.115638 kubelet[1448]: W1002 19:01:09.115620 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.115638 kubelet[1448]: E1002 19:01:09.115631 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.115837 kubelet[1448]: E1002 19:01:09.115824 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.115837 kubelet[1448]: W1002 19:01:09.115835 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.115907 kubelet[1448]: E1002 19:01:09.115852 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.116047 kubelet[1448]: E1002 19:01:09.116035 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.116047 kubelet[1448]: W1002 19:01:09.116048 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.116114 kubelet[1448]: E1002 19:01:09.116062 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.116214 kubelet[1448]: E1002 19:01:09.116203 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.116249 kubelet[1448]: W1002 19:01:09.116214 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.116249 kubelet[1448]: E1002 19:01:09.116225 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.116395 kubelet[1448]: E1002 19:01:09.116385 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.116430 kubelet[1448]: W1002 19:01:09.116395 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.116430 kubelet[1448]: E1002 19:01:09.116409 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.116753 kubelet[1448]: E1002 19:01:09.116740 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.116753 kubelet[1448]: W1002 19:01:09.116753 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.116819 kubelet[1448]: E1002 19:01:09.116764 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.116912 kubelet[1448]: E1002 19:01:09.116902 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.116912 kubelet[1448]: W1002 19:01:09.116912 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.116969 kubelet[1448]: E1002 19:01:09.116921 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.117054 kubelet[1448]: E1002 19:01:09.117045 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.117054 kubelet[1448]: W1002 19:01:09.117054 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.117112 kubelet[1448]: E1002 19:01:09.117063 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.117191 kubelet[1448]: E1002 19:01:09.117178 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.117191 kubelet[1448]: W1002 19:01:09.117187 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.117247 kubelet[1448]: E1002 19:01:09.117195 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.117338 kubelet[1448]: E1002 19:01:09.117330 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.117338 kubelet[1448]: W1002 19:01:09.117339 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.117387 kubelet[1448]: E1002 19:01:09.117347 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.117626 kubelet[1448]: E1002 19:01:09.117615 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:09.117626 kubelet[1448]: W1002 19:01:09.117626 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:09.117676 kubelet[1448]: E1002 19:01:09.117636 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:09.557303 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4166546134.mount: Deactivated successfully. Oct 2 19:01:09.776384 kubelet[1448]: E1002 19:01:09.776338 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:10.018853 kubelet[1448]: E1002 19:01:10.018752 1448 dns.go:157] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:01:10.078166 env[1147]: time="2023-10-02T19:01:10.078128698Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:10.079589 env[1147]: time="2023-10-02T19:01:10.079552098Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2bfa083ce51f1c757f20693cfea8ad121e2748f96a90fef52f087057eac59214,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:10.083867 env[1147]: time="2023-10-02T19:01:10.083830098Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:10.085249 env[1147]: time="2023-10-02T19:01:10.085219258Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:89eef35e1bbe8c88792ce69c3f3f38fb9838e58602c570524350b5f3ab127582,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:10.085985 env[1147]: time="2023-10-02T19:01:10.085958938Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\" returns image reference \"sha256:2bfa083ce51f1c757f20693cfea8ad121e2748f96a90fef52f087057eac59214\"" Oct 2 19:01:10.086989 env[1147]: time="2023-10-02T19:01:10.086960498Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\"" Oct 2 19:01:10.087767 env[1147]: time="2023-10-02T19:01:10.087739378Z" level=info msg="CreateContainer within sandbox \"c02814764b5722a5941693b67df4591c8851d885ee5f6be82d83353cdd896d1b\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Oct 2 19:01:10.097413 env[1147]: time="2023-10-02T19:01:10.097363498Z" level=info msg="CreateContainer within sandbox \"c02814764b5722a5941693b67df4591c8851d885ee5f6be82d83353cdd896d1b\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"68e6fb8ddfba6c3d8725229e8f3cb6afbea05b8f1fb96c2dc246dfafc267f1f1\"" Oct 2 19:01:10.097915 env[1147]: time="2023-10-02T19:01:10.097889258Z" level=info msg="StartContainer for \"68e6fb8ddfba6c3d8725229e8f3cb6afbea05b8f1fb96c2dc246dfafc267f1f1\"" Oct 2 19:01:10.098147 kubelet[1448]: E1002 19:01:10.098129 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.098203 kubelet[1448]: W1002 19:01:10.098149 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.098203 kubelet[1448]: E1002 19:01:10.098167 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.098385 kubelet[1448]: E1002 19:01:10.098372 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.098417 kubelet[1448]: W1002 19:01:10.098386 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.098417 kubelet[1448]: E1002 19:01:10.098397 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.098671 kubelet[1448]: E1002 19:01:10.098656 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.098701 kubelet[1448]: W1002 19:01:10.098672 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.098701 kubelet[1448]: E1002 19:01:10.098688 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.098931 kubelet[1448]: E1002 19:01:10.098912 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.098931 kubelet[1448]: W1002 19:01:10.098927 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.098989 kubelet[1448]: E1002 19:01:10.098939 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.099134 kubelet[1448]: E1002 19:01:10.099123 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.099134 kubelet[1448]: W1002 19:01:10.099134 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.099189 kubelet[1448]: E1002 19:01:10.099144 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.099478 kubelet[1448]: E1002 19:01:10.099460 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.099526 kubelet[1448]: W1002 19:01:10.099478 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.099606 kubelet[1448]: E1002 19:01:10.099590 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.100207 kubelet[1448]: E1002 19:01:10.099924 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.100256 kubelet[1448]: W1002 19:01:10.100208 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.100256 kubelet[1448]: E1002 19:01:10.100224 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.100430 kubelet[1448]: E1002 19:01:10.100418 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.100430 kubelet[1448]: W1002 19:01:10.100430 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.100491 kubelet[1448]: E1002 19:01:10.100441 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.100611 kubelet[1448]: E1002 19:01:10.100599 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.100611 kubelet[1448]: W1002 19:01:10.100611 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.100676 kubelet[1448]: E1002 19:01:10.100620 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.100848 kubelet[1448]: E1002 19:01:10.100835 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.100848 kubelet[1448]: W1002 19:01:10.100846 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.100921 kubelet[1448]: E1002 19:01:10.100857 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.101008 kubelet[1448]: E1002 19:01:10.100996 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.101008 kubelet[1448]: W1002 19:01:10.101006 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.101064 kubelet[1448]: E1002 19:01:10.101015 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.101155 kubelet[1448]: E1002 19:01:10.101144 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.101155 kubelet[1448]: W1002 19:01:10.101153 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.101210 kubelet[1448]: E1002 19:01:10.101162 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.101331 kubelet[1448]: E1002 19:01:10.101320 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.101331 kubelet[1448]: W1002 19:01:10.101331 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.101380 kubelet[1448]: E1002 19:01:10.101340 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.101497 kubelet[1448]: E1002 19:01:10.101480 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.101497 kubelet[1448]: W1002 19:01:10.101490 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.101553 kubelet[1448]: E1002 19:01:10.101500 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.101682 kubelet[1448]: E1002 19:01:10.101668 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.101682 kubelet[1448]: W1002 19:01:10.101680 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.101757 kubelet[1448]: E1002 19:01:10.101698 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.101883 kubelet[1448]: E1002 19:01:10.101863 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.101883 kubelet[1448]: W1002 19:01:10.101875 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.101883 kubelet[1448]: E1002 19:01:10.101885 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.114826 systemd[1]: Started cri-containerd-68e6fb8ddfba6c3d8725229e8f3cb6afbea05b8f1fb96c2dc246dfafc267f1f1.scope. Oct 2 19:01:10.122106 kubelet[1448]: E1002 19:01:10.121957 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.122106 kubelet[1448]: W1002 19:01:10.121983 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.122106 kubelet[1448]: E1002 19:01:10.122000 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.122451 kubelet[1448]: E1002 19:01:10.122338 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.122451 kubelet[1448]: W1002 19:01:10.122352 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.122451 kubelet[1448]: E1002 19:01:10.122371 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.122666 kubelet[1448]: E1002 19:01:10.122647 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.122666 kubelet[1448]: W1002 19:01:10.122664 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.122747 kubelet[1448]: E1002 19:01:10.122684 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.122962 kubelet[1448]: E1002 19:01:10.122947 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.122962 kubelet[1448]: W1002 19:01:10.122960 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.123031 kubelet[1448]: E1002 19:01:10.122975 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.123139 kubelet[1448]: E1002 19:01:10.123126 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.123139 kubelet[1448]: W1002 19:01:10.123139 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.123197 kubelet[1448]: E1002 19:01:10.123151 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.125427 kubelet[1448]: E1002 19:01:10.125380 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.125427 kubelet[1448]: W1002 19:01:10.125397 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.125427 kubelet[1448]: E1002 19:01:10.125415 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.127537 kubelet[1448]: E1002 19:01:10.125781 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.127537 kubelet[1448]: W1002 19:01:10.125796 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.127537 kubelet[1448]: E1002 19:01:10.125840 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.127537 kubelet[1448]: E1002 19:01:10.125949 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.127537 kubelet[1448]: W1002 19:01:10.125956 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.127537 kubelet[1448]: E1002 19:01:10.125966 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.127537 kubelet[1448]: E1002 19:01:10.126140 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.127537 kubelet[1448]: W1002 19:01:10.126148 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.127537 kubelet[1448]: E1002 19:01:10.126159 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.127537 kubelet[1448]: E1002 19:01:10.126302 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.127828 kubelet[1448]: W1002 19:01:10.126309 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.127828 kubelet[1448]: E1002 19:01:10.126318 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.127828 kubelet[1448]: E1002 19:01:10.126465 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.127828 kubelet[1448]: W1002 19:01:10.126471 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.127828 kubelet[1448]: E1002 19:01:10.126480 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.127828 kubelet[1448]: E1002 19:01:10.126758 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:10.127828 kubelet[1448]: W1002 19:01:10.126767 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:10.127828 kubelet[1448]: E1002 19:01:10.126779 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:10.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit: BPF prog-id=76 op=LOAD Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { bpf } for pid=1879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=1583 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:10.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638653666623864646662613663336438373235323239653866336362 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { perfmon } for pid=1879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=1583 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:10.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638653666623864646662613663336438373235323239653866336362 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { bpf } for pid=1879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { bpf } for pid=1879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { bpf } for pid=1879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { perfmon } for pid=1879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { perfmon } for pid=1879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { perfmon } for pid=1879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { perfmon } for pid=1879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { perfmon } for pid=1879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { bpf } for pid=1879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { bpf } for pid=1879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit: BPF prog-id=77 op=LOAD Oct 2 19:01:10.135000 audit[1879]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=1583 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:10.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638653666623864646662613663336438373235323239653866336362 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { bpf } for pid=1879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { bpf } for pid=1879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { perfmon } for pid=1879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { perfmon } for pid=1879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { perfmon } for pid=1879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { perfmon } for pid=1879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { perfmon } for pid=1879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { bpf } for pid=1879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { bpf } for pid=1879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit: BPF prog-id=78 op=LOAD Oct 2 19:01:10.135000 audit[1879]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=1583 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:10.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638653666623864646662613663336438373235323239653866336362 Oct 2 19:01:10.135000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:01:10.135000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { bpf } for pid=1879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { bpf } for pid=1879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { bpf } for pid=1879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { perfmon } for pid=1879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { perfmon } for pid=1879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { perfmon } for pid=1879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { perfmon } for pid=1879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { perfmon } for pid=1879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { bpf } for pid=1879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit[1879]: AVC avc: denied { bpf } for pid=1879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:10.135000 audit: BPF prog-id=79 op=LOAD Oct 2 19:01:10.135000 audit[1879]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=1583 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:10.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638653666623864646662613663336438373235323239653866336362 Oct 2 19:01:10.152886 env[1147]: time="2023-10-02T19:01:10.152843338Z" level=info msg="StartContainer for \"68e6fb8ddfba6c3d8725229e8f3cb6afbea05b8f1fb96c2dc246dfafc267f1f1\" returns successfully" Oct 2 19:01:10.776693 kubelet[1448]: E1002 19:01:10.776638 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:11.096736 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4293062208.mount: Deactivated successfully. Oct 2 19:01:11.107854 kubelet[1448]: E1002 19:01:11.107745 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:11.107854 kubelet[1448]: W1002 19:01:11.107765 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:11.107854 kubelet[1448]: E1002 19:01:11.107784 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:11.108142 kubelet[1448]: E1002 19:01:11.108047 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:11.108142 kubelet[1448]: W1002 19:01:11.108058 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:11.108142 kubelet[1448]: E1002 19:01:11.108070 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:11.108422 kubelet[1448]: E1002 19:01:11.108278 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:11.108422 kubelet[1448]: W1002 19:01:11.108289 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:11.108422 kubelet[1448]: E1002 19:01:11.108303 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:11.108662 kubelet[1448]: E1002 19:01:11.108570 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:11.108662 kubelet[1448]: W1002 19:01:11.108582 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:11.108662 kubelet[1448]: E1002 19:01:11.108594 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:11.108903 kubelet[1448]: E1002 19:01:11.108815 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:11.108903 kubelet[1448]: W1002 19:01:11.108826 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:11.108903 kubelet[1448]: E1002 19:01:11.108838 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:11.109047 kubelet[1448]: E1002 19:01:11.109036 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:11.109108 kubelet[1448]: W1002 19:01:11.109097 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:11.109162 kubelet[1448]: E1002 19:01:11.109153 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:11.109359 kubelet[1448]: E1002 19:01:11.109347 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:11.109429 kubelet[1448]: W1002 19:01:11.109418 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:11.109483 kubelet[1448]: E1002 19:01:11.109472 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:11.109697 kubelet[1448]: E1002 19:01:11.109683 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:11.109793 kubelet[1448]: W1002 19:01:11.109779 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:11.109847 kubelet[1448]: E1002 19:01:11.109839 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:11.127016 kubelet[1448]: E1002 19:01:11.126996 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:11.127016 kubelet[1448]: W1002 19:01:11.127012 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:11.127016 kubelet[1448]: E1002 19:01:11.127026 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:11.127282 kubelet[1448]: E1002 19:01:11.127268 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:11.127282 kubelet[1448]: W1002 19:01:11.127281 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:11.127362 kubelet[1448]: E1002 19:01:11.127296 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:11.127470 kubelet[1448]: E1002 19:01:11.127458 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:11.127501 kubelet[1448]: W1002 19:01:11.127470 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:11.127501 kubelet[1448]: E1002 19:01:11.127482 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:11.127665 kubelet[1448]: E1002 19:01:11.127654 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:11.127665 kubelet[1448]: W1002 19:01:11.127664 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:11.127760 kubelet[1448]: E1002 19:01:11.127677 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:11.127870 kubelet[1448]: E1002 19:01:11.127859 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:11.127902 kubelet[1448]: W1002 19:01:11.127872 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:11.127902 kubelet[1448]: E1002 19:01:11.127883 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:11.128215 kubelet[1448]: E1002 19:01:11.128204 1448 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:01:11.128215 kubelet[1448]: W1002 19:01:11.128216 1448 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:01:11.128279 kubelet[1448]: E1002 19:01:11.128227 1448 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:01:11.161038 env[1147]: time="2023-10-02T19:01:11.160981218Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:11.162104 env[1147]: time="2023-10-02T19:01:11.162078978Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:125b9deae5a04d82056336c1aff8ab9c7ed64cdc224c7139c7433a3a29c21fc8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:11.163159 env[1147]: time="2023-10-02T19:01:11.163136458Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:11.164705 env[1147]: time="2023-10-02T19:01:11.164679178Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:182a323c25a3503be8c504892a12a55d99a42c3a582cb8e93a1ecc7c193a44c5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:11.165199 env[1147]: time="2023-10-02T19:01:11.165162258Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\" returns image reference \"sha256:125b9deae5a04d82056336c1aff8ab9c7ed64cdc224c7139c7433a3a29c21fc8\"" Oct 2 19:01:11.166851 env[1147]: time="2023-10-02T19:01:11.166815138Z" level=info msg="CreateContainer within sandbox \"8ade5248319f562d67778966844bf0a9bc42ff259f92c989352c4d81b0eeb26e\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Oct 2 19:01:11.175817 env[1147]: time="2023-10-02T19:01:11.175774098Z" level=info msg="CreateContainer within sandbox \"8ade5248319f562d67778966844bf0a9bc42ff259f92c989352c4d81b0eeb26e\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"c999afcdfe153f0f261b63e988f562622c9305109fb955d7cfdaf4ea2e78da4c\"" Oct 2 19:01:11.176401 env[1147]: time="2023-10-02T19:01:11.176372178Z" level=info msg="StartContainer for \"c999afcdfe153f0f261b63e988f562622c9305109fb955d7cfdaf4ea2e78da4c\"" Oct 2 19:01:11.195203 systemd[1]: Started cri-containerd-c999afcdfe153f0f261b63e988f562622c9305109fb955d7cfdaf4ea2e78da4c.scope. Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=1618 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:11.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339393961666364666531353366306632363162363365393838663536 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit: BPF prog-id=80 op=LOAD Oct 2 19:01:11.236000 audit[1943]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=1618 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:11.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339393961666364666531353366306632363162363365393838663536 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit: BPF prog-id=81 op=LOAD Oct 2 19:01:11.236000 audit[1943]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=1618 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:11.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339393961666364666531353366306632363162363365393838663536 Oct 2 19:01:11.236000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:01:11.236000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:11.236000 audit: BPF prog-id=82 op=LOAD Oct 2 19:01:11.236000 audit[1943]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=1618 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:11.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339393961666364666531353366306632363162363365393838663536 Oct 2 19:01:11.254279 env[1147]: time="2023-10-02T19:01:11.254220818Z" level=info msg="StartContainer for \"c999afcdfe153f0f261b63e988f562622c9305109fb955d7cfdaf4ea2e78da4c\" returns successfully" Oct 2 19:01:11.261669 systemd[1]: cri-containerd-c999afcdfe153f0f261b63e988f562622c9305109fb955d7cfdaf4ea2e78da4c.scope: Deactivated successfully. Oct 2 19:01:11.264000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:01:11.507192 env[1147]: time="2023-10-02T19:01:11.507081898Z" level=info msg="shim disconnected" id=c999afcdfe153f0f261b63e988f562622c9305109fb955d7cfdaf4ea2e78da4c Oct 2 19:01:11.507192 env[1147]: time="2023-10-02T19:01:11.507126578Z" level=warning msg="cleaning up after shim disconnected" id=c999afcdfe153f0f261b63e988f562622c9305109fb955d7cfdaf4ea2e78da4c namespace=k8s.io Oct 2 19:01:11.507192 env[1147]: time="2023-10-02T19:01:11.507139058Z" level=info msg="cleaning up dead shim" Oct 2 19:01:11.516163 env[1147]: time="2023-10-02T19:01:11.516104218Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:01:11Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=1983 runtime=io.containerd.runc.v2\n" Oct 2 19:01:11.777833 kubelet[1448]: E1002 19:01:11.777720 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:12.023965 kubelet[1448]: E1002 19:01:12.023935 1448 dns.go:157] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:01:12.025130 env[1147]: time="2023-10-02T19:01:12.025093458Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\"" Oct 2 19:01:12.096766 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c999afcdfe153f0f261b63e988f562622c9305109fb955d7cfdaf4ea2e78da4c-rootfs.mount: Deactivated successfully. Oct 2 19:01:12.778714 kubelet[1448]: E1002 19:01:12.778646 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:12.814218 kubelet[1448]: E1002 19:01:12.814182 1448 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:01:12.905126 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount653625636.mount: Deactivated successfully. Oct 2 19:01:13.779392 kubelet[1448]: E1002 19:01:13.779340 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:14.640141 env[1147]: time="2023-10-02T19:01:14.640091660Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:14.641475 env[1147]: time="2023-10-02T19:01:14.641434338Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0bb8d6f033a0548573ff857c26574d89a8ad4b691aa88a32eddf0c7db06599ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:14.642706 env[1147]: time="2023-10-02T19:01:14.642674215Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:14.644001 env[1147]: time="2023-10-02T19:01:14.643980013Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:34bf454be8cd5b9a35ab29c2479ff68a26497c2c87eb606e4bfe57c7fbeeff35,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:14.644399 env[1147]: time="2023-10-02T19:01:14.644367012Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\" returns image reference \"sha256:0bb8d6f033a0548573ff857c26574d89a8ad4b691aa88a32eddf0c7db06599ef\"" Oct 2 19:01:14.646230 env[1147]: time="2023-10-02T19:01:14.646190929Z" level=info msg="CreateContainer within sandbox \"8ade5248319f562d67778966844bf0a9bc42ff259f92c989352c4d81b0eeb26e\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Oct 2 19:01:14.655786 env[1147]: time="2023-10-02T19:01:14.655743030Z" level=info msg="CreateContainer within sandbox \"8ade5248319f562d67778966844bf0a9bc42ff259f92c989352c4d81b0eeb26e\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"2b015540354ea0dee5ed2da73a5404b73f6780923679e974a46303f29860b072\"" Oct 2 19:01:14.656344 env[1147]: time="2023-10-02T19:01:14.656289269Z" level=info msg="StartContainer for \"2b015540354ea0dee5ed2da73a5404b73f6780923679e974a46303f29860b072\"" Oct 2 19:01:14.675827 systemd[1]: Started cri-containerd-2b015540354ea0dee5ed2da73a5404b73f6780923679e974a46303f29860b072.scope. Oct 2 19:01:14.701528 kernel: kauditd_printk_skb: 443 callbacks suppressed Oct 2 19:01:14.701633 kernel: audit: type=1400 audit(1696273274.696:692): avc: denied { perfmon } for pid=2008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.701661 kernel: audit: type=1300 audit(1696273274.696:692): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=1618 pid=2008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:14.696000 audit[2008]: AVC avc: denied { perfmon } for pid=2008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.696000 audit[2008]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=1618 pid=2008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:14.696000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262303135353430333534656130646565356564326461373361353430 Oct 2 19:01:14.708085 kernel: audit: type=1327 audit(1696273274.696:692): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262303135353430333534656130646565356564326461373361353430 Oct 2 19:01:14.708146 kernel: audit: type=1400 audit(1696273274.697:693): avc: denied { bpf } for pid=2008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.697000 audit[2008]: AVC avc: denied { bpf } for pid=2008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.697000 audit[2008]: AVC avc: denied { bpf } for pid=2008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.712924 kernel: audit: type=1400 audit(1696273274.697:693): avc: denied { bpf } for pid=2008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.713003 kernel: audit: type=1400 audit(1696273274.697:693): avc: denied { bpf } for pid=2008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.697000 audit[2008]: AVC avc: denied { bpf } for pid=2008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.715153 kernel: audit: type=1400 audit(1696273274.697:693): avc: denied { perfmon } for pid=2008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.697000 audit[2008]: AVC avc: denied { perfmon } for pid=2008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.717402 kernel: audit: type=1400 audit(1696273274.697:693): avc: denied { perfmon } for pid=2008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.697000 audit[2008]: AVC avc: denied { perfmon } for pid=2008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.723281 kernel: audit: type=1400 audit(1696273274.697:693): avc: denied { perfmon } for pid=2008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.723345 kernel: audit: type=1400 audit(1696273274.697:693): avc: denied { perfmon } for pid=2008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.697000 audit[2008]: AVC avc: denied { perfmon } for pid=2008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.697000 audit[2008]: AVC avc: denied { perfmon } for pid=2008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.697000 audit[2008]: AVC avc: denied { perfmon } for pid=2008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.697000 audit[2008]: AVC avc: denied { bpf } for pid=2008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.697000 audit[2008]: AVC avc: denied { bpf } for pid=2008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.697000 audit: BPF prog-id=83 op=LOAD Oct 2 19:01:14.697000 audit[2008]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=1618 pid=2008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:14.697000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262303135353430333534656130646565356564326461373361353430 Oct 2 19:01:14.697000 audit[2008]: AVC avc: denied { bpf } for pid=2008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.697000 audit[2008]: AVC avc: denied { bpf } for pid=2008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.697000 audit[2008]: AVC avc: denied { perfmon } for pid=2008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.697000 audit[2008]: AVC avc: denied { perfmon } for pid=2008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.697000 audit[2008]: AVC avc: denied { perfmon } for pid=2008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.697000 audit[2008]: AVC avc: denied { perfmon } for pid=2008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.697000 audit[2008]: AVC avc: denied { perfmon } for pid=2008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.697000 audit[2008]: AVC avc: denied { bpf } for pid=2008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.697000 audit[2008]: AVC avc: denied { bpf } for pid=2008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.697000 audit: BPF prog-id=84 op=LOAD Oct 2 19:01:14.697000 audit[2008]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=1618 pid=2008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:14.697000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262303135353430333534656130646565356564326461373361353430 Oct 2 19:01:14.700000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:01:14.700000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:01:14.700000 audit[2008]: AVC avc: denied { bpf } for pid=2008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.700000 audit[2008]: AVC avc: denied { bpf } for pid=2008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.700000 audit[2008]: AVC avc: denied { bpf } for pid=2008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.700000 audit[2008]: AVC avc: denied { perfmon } for pid=2008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.700000 audit[2008]: AVC avc: denied { perfmon } for pid=2008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.700000 audit[2008]: AVC avc: denied { perfmon } for pid=2008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.700000 audit[2008]: AVC avc: denied { perfmon } for pid=2008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.700000 audit[2008]: AVC avc: denied { perfmon } for pid=2008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.700000 audit[2008]: AVC avc: denied { bpf } for pid=2008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.700000 audit[2008]: AVC avc: denied { bpf } for pid=2008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:14.700000 audit: BPF prog-id=85 op=LOAD Oct 2 19:01:14.700000 audit[2008]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=1618 pid=2008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:14.700000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262303135353430333534656130646565356564326461373361353430 Oct 2 19:01:14.728157 env[1147]: time="2023-10-02T19:01:14.727851170Z" level=info msg="StartContainer for \"2b015540354ea0dee5ed2da73a5404b73f6780923679e974a46303f29860b072\" returns successfully" Oct 2 19:01:14.788169 kubelet[1448]: E1002 19:01:14.780073 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:15.030326 kubelet[1448]: E1002 19:01:15.030241 1448 dns.go:157] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:01:15.313071 systemd[1]: cri-containerd-2b015540354ea0dee5ed2da73a5404b73f6780923679e974a46303f29860b072.scope: Deactivated successfully. Oct 2 19:01:15.315000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:01:15.334377 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2b015540354ea0dee5ed2da73a5404b73f6780923679e974a46303f29860b072-rootfs.mount: Deactivated successfully. Oct 2 19:01:15.747397 env[1147]: time="2023-10-02T19:01:15.747131203Z" level=info msg="shim disconnected" id=2b015540354ea0dee5ed2da73a5404b73f6780923679e974a46303f29860b072 Oct 2 19:01:15.747397 env[1147]: time="2023-10-02T19:01:15.747187243Z" level=warning msg="cleaning up after shim disconnected" id=2b015540354ea0dee5ed2da73a5404b73f6780923679e974a46303f29860b072 namespace=k8s.io Oct 2 19:01:15.747397 env[1147]: time="2023-10-02T19:01:15.747199083Z" level=info msg="cleaning up dead shim" Oct 2 19:01:15.757497 env[1147]: time="2023-10-02T19:01:15.757432025Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:01:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2055 runtime=io.containerd.runc.v2\n" Oct 2 19:01:15.780529 kubelet[1448]: E1002 19:01:15.780469 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:16.032854 kubelet[1448]: E1002 19:01:16.032760 1448 dns.go:157] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:01:16.034451 env[1147]: time="2023-10-02T19:01:16.034410363Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\"" Oct 2 19:01:16.781422 kubelet[1448]: E1002 19:01:16.781356 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:17.781906 kubelet[1448]: E1002 19:01:17.781853 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:18.782327 kubelet[1448]: E1002 19:01:18.781961 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:19.191713 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2911255186.mount: Deactivated successfully. Oct 2 19:01:19.366298 env[1147]: time="2023-10-02T19:01:19.366225912Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:19.367497 env[1147]: time="2023-10-02T19:01:19.367464951Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8a2dff14388de51338e7468b834f0b37232379ce3cd97ac3c4a07b110a41ad00,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:19.369302 env[1147]: time="2023-10-02T19:01:19.369268268Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:19.370793 env[1147]: time="2023-10-02T19:01:19.370761386Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e898f4b7b55c908c88dad008ae939024e71ed93c5effbb10cca891b658b2f001,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:19.371401 env[1147]: time="2023-10-02T19:01:19.371371785Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\" returns image reference \"sha256:8a2dff14388de51338e7468b834f0b37232379ce3cd97ac3c4a07b110a41ad00\"" Oct 2 19:01:19.373680 env[1147]: time="2023-10-02T19:01:19.373376222Z" level=info msg="CreateContainer within sandbox \"8ade5248319f562d67778966844bf0a9bc42ff259f92c989352c4d81b0eeb26e\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Oct 2 19:01:19.384122 env[1147]: time="2023-10-02T19:01:19.384079887Z" level=info msg="CreateContainer within sandbox \"8ade5248319f562d67778966844bf0a9bc42ff259f92c989352c4d81b0eeb26e\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"353eb5a2e1f8f57adfac216e575be687e5c64ebd2c543e749197f3ce489936f0\"" Oct 2 19:01:19.384528 env[1147]: time="2023-10-02T19:01:19.384484367Z" level=info msg="StartContainer for \"353eb5a2e1f8f57adfac216e575be687e5c64ebd2c543e749197f3ce489936f0\"" Oct 2 19:01:19.404275 systemd[1]: Started cri-containerd-353eb5a2e1f8f57adfac216e575be687e5c64ebd2c543e749197f3ce489936f0.scope. Oct 2 19:01:19.446000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.446000 audit[2075]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=1618 pid=2075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:19.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335336562356132653166386635376164666163323136653537356265 Oct 2 19:01:19.446000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.446000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.446000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.446000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.446000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.446000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.446000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.446000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.446000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.446000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.446000 audit: BPF prog-id=86 op=LOAD Oct 2 19:01:19.446000 audit[2075]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=1618 pid=2075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:19.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335336562356132653166386635376164666163323136653537356265 Oct 2 19:01:19.447000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.447000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.447000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.447000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.447000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.447000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.447000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.447000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.447000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.447000 audit: BPF prog-id=87 op=LOAD Oct 2 19:01:19.447000 audit[2075]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=1618 pid=2075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:19.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335336562356132653166386635376164666163323136653537356265 Oct 2 19:01:19.447000 audit: BPF prog-id=87 op=UNLOAD Oct 2 19:01:19.447000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:01:19.447000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.447000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.447000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.447000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.447000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.447000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.447000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.447000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.447000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.447000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:19.447000 audit: BPF prog-id=88 op=LOAD Oct 2 19:01:19.447000 audit[2075]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=1618 pid=2075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:19.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335336562356132653166386635376164666163323136653537356265 Oct 2 19:01:19.465519 env[1147]: time="2023-10-02T19:01:19.465462973Z" level=info msg="StartContainer for \"353eb5a2e1f8f57adfac216e575be687e5c64ebd2c543e749197f3ce489936f0\" returns successfully" Oct 2 19:01:19.578058 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Oct 2 19:01:19.578180 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Oct 2 19:01:19.782381 kubelet[1448]: E1002 19:01:19.782268 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:20.041518 kubelet[1448]: E1002 19:01:20.041288 1448 dns.go:157] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:01:20.783450 kubelet[1448]: E1002 19:01:20.783396 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:20.854000 audit[2202]: AVC avc: denied { write } for pid=2202 comm="tee" name="fd" dev="proc" ino=11932 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:01:20.859711 kernel: kauditd_printk_skb: 77 callbacks suppressed Oct 2 19:01:20.859781 kernel: audit: type=1400 audit(1696273280.854:705): avc: denied { write } for pid=2202 comm="tee" name="fd" dev="proc" ino=11932 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:01:20.859811 kernel: audit: type=1300 audit(1696273280.854:705): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc89a498f a2=241 a3=1b6 items=1 ppid=2176 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:20.854000 audit[2202]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc89a498f a2=241 a3=1b6 items=1 ppid=2176 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:20.854000 audit: CWD cwd="/etc/service/enabled/confd/log" Oct 2 19:01:20.863843 kernel: audit: type=1307 audit(1696273280.854:705): cwd="/etc/service/enabled/confd/log" Oct 2 19:01:20.863918 kernel: audit: type=1302 audit(1696273280.854:705): item=0 name="/dev/fd/63" inode=11928 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:01:20.854000 audit: PATH item=0 name="/dev/fd/63" inode=11928 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:01:20.854000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:01:20.868608 kernel: audit: type=1327 audit(1696273280.854:705): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:01:20.868688 kernel: audit: type=1400 audit(1696273280.854:706): avc: denied { write } for pid=2204 comm="tee" name="fd" dev="proc" ino=11936 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:01:20.854000 audit[2204]: AVC avc: denied { write } for pid=2204 comm="tee" name="fd" dev="proc" ino=11936 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:01:20.871139 kernel: audit: type=1300 audit(1696273280.854:706): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc208a991 a2=241 a3=1b6 items=1 ppid=2178 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:20.854000 audit[2204]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc208a991 a2=241 a3=1b6 items=1 ppid=2178 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:20.874900 kernel: audit: type=1307 audit(1696273280.854:706): cwd="/etc/service/enabled/cni/log" Oct 2 19:01:20.854000 audit: CWD cwd="/etc/service/enabled/cni/log" Oct 2 19:01:20.875903 kernel: audit: type=1302 audit(1696273280.854:706): item=0 name="/dev/fd/63" inode=11929 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:01:20.854000 audit: PATH item=0 name="/dev/fd/63" inode=11929 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:01:20.854000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:01:20.886679 kernel: audit: type=1327 audit(1696273280.854:706): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:01:20.875000 audit[2229]: AVC avc: denied { write } for pid=2229 comm="tee" name="fd" dev="proc" ino=14085 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:01:20.875000 audit[2229]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffc6a198f a2=241 a3=1b6 items=1 ppid=2173 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:20.875000 audit: CWD cwd="/etc/service/enabled/felix/log" Oct 2 19:01:20.875000 audit: PATH item=0 name="/dev/fd/63" inode=14082 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:01:20.875000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:01:20.876000 audit[2234]: AVC avc: denied { write } for pid=2234 comm="tee" name="fd" dev="proc" ino=11948 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:01:20.876000 audit[2234]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcd97497f a2=241 a3=1b6 items=1 ppid=2186 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:20.876000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Oct 2 19:01:20.876000 audit: PATH item=0 name="/dev/fd/63" inode=11945 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:01:20.876000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:01:20.876000 audit[2227]: AVC avc: denied { write } for pid=2227 comm="tee" name="fd" dev="proc" ino=15454 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:01:20.876000 audit[2227]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcbbd398f a2=241 a3=1b6 items=1 ppid=2171 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:20.876000 audit: CWD cwd="/etc/service/enabled/bird6/log" Oct 2 19:01:20.876000 audit: PATH item=0 name="/dev/fd/63" inode=15447 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:01:20.876000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:01:20.898000 audit[2242]: AVC avc: denied { write } for pid=2242 comm="tee" name="fd" dev="proc" ino=15139 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:01:20.898000 audit[2242]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffefe40990 a2=241 a3=1b6 items=1 ppid=2167 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:20.898000 audit: CWD cwd="/etc/service/enabled/bird/log" Oct 2 19:01:20.898000 audit: PATH item=0 name="/dev/fd/63" inode=15459 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:01:20.898000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:01:20.919000 audit[2247]: AVC avc: denied { write } for pid=2247 comm="tee" name="fd" dev="proc" ino=15143 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:01:20.919000 audit[2247]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffedcee980 a2=241 a3=1b6 items=1 ppid=2165 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:20.919000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Oct 2 19:01:20.919000 audit: PATH item=0 name="/dev/fd/63" inode=11952 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:01:20.919000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:01:21.045333 kubelet[1448]: E1002 19:01:21.045236 1448 dns.go:157] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:01:21.074534 kernel: Initializing XFRM netlink socket Oct 2 19:01:21.169000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.169000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.169000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.169000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.169000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.169000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.169000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.169000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.169000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.169000 audit: BPF prog-id=89 op=LOAD Oct 2 19:01:21.169000 audit[2343]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdaf11608 a2=70 a3=0 items=0 ppid=2174 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:21.169000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:01:21.170000 audit: BPF prog-id=89 op=UNLOAD Oct 2 19:01:21.170000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.170000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.170000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.170000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.170000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.170000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.170000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.170000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.170000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.170000 audit: BPF prog-id=90 op=LOAD Oct 2 19:01:21.170000 audit[2343]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdaf11608 a2=70 a3=4a174c items=0 ppid=2174 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:21.170000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:01:21.170000 audit: BPF prog-id=90 op=UNLOAD Oct 2 19:01:21.170000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.170000 audit[2343]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffdaf11638 a2=70 a3=176fd79f items=0 ppid=2174 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:21.170000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:01:21.170000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.170000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.170000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.170000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.170000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.170000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.170000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.170000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.170000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.170000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.170000 audit: BPF prog-id=91 op=LOAD Oct 2 19:01:21.170000 audit[2343]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffdaf11588 a2=70 a3=176fd7b9 items=0 ppid=2174 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:21.170000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:01:21.174000 audit[2346]: AVC avc: denied { bpf } for pid=2346 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.174000 audit[2346]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffca3c4af8 a2=70 a3=0 items=0 ppid=2174 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:21.174000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 19:01:21.174000 audit[2346]: AVC avc: denied { bpf } for pid=2346 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.174000 audit[2346]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffca3c49d8 a2=70 a3=2 items=0 ppid=2174 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:21.174000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 19:01:21.182000 audit: BPF prog-id=91 op=UNLOAD Oct 2 19:01:21.244000 audit[2372]: NETFILTER_CFG table=mangle:79 family=2 entries=19 op=nft_register_chain pid=2372 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:01:21.244000 audit[2372]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6800 a0=3 a1=ffffe854c630 a2=0 a3=ffffbe414fa0 items=0 ppid=2174 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:21.244000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:01:21.247000 audit[2371]: NETFILTER_CFG table=raw:80 family=2 entries=19 op=nft_register_chain pid=2371 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:01:21.247000 audit[2371]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6132 a0=3 a1=ffffe91eff80 a2=0 a3=ffff8cbb9fa0 items=0 ppid=2174 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:21.247000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:01:21.248000 audit[2373]: NETFILTER_CFG table=nat:81 family=2 entries=16 op=nft_register_chain pid=2373 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:01:21.248000 audit[2373]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5188 a0=3 a1=ffffe8619aa0 a2=0 a3=ffff8554cfa0 items=0 ppid=2174 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:21.248000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:01:21.251000 audit[2376]: NETFILTER_CFG table=filter:82 family=2 entries=39 op=nft_register_chain pid=2376 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:01:21.251000 audit[2376]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=18472 a0=3 a1=ffffc55f4aa0 a2=0 a3=ffffad63efa0 items=0 ppid=2174 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:21.251000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:01:21.255585 kubelet[1448]: I1002 19:01:21.255039 1448 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:01:21.257986 kubelet[1448]: I1002 19:01:21.257552 1448 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:01:21.257986 kubelet[1448]: I1002 19:01:21.257782 1448 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:01:21.260073 systemd[1]: Created slice kubepods-burstable-pod0d297819_9559_41aa_ad73_d0513ee97a58.slice. Oct 2 19:01:21.262196 kubelet[1448]: I1002 19:01:21.261899 1448 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:01:21.280146 systemd[1]: Created slice kubepods-besteffort-pode989a528_70bb_4f1d_99d6_ce3d072d1612.slice. Oct 2 19:01:21.284243 systemd[1]: Created slice kubepods-burstable-pod0393487d_b389_48c4_bdba_e7cb93af3f9e.slice. Oct 2 19:01:21.288038 systemd[1]: Created slice kubepods-besteffort-podd89d6de6_088e_4d24_918a_66a4080967e8.slice. Oct 2 19:01:21.386090 kubelet[1448]: I1002 19:01:21.385990 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-22ltk\" (UniqueName: \"kubernetes.io/projected/d89d6de6-088e-4d24-918a-66a4080967e8-kube-api-access-22ltk\") pod \"csi-node-driver-5rj8j\" (UID: \"d89d6de6-088e-4d24-918a-66a4080967e8\") " pod="calico-system/csi-node-driver-5rj8j" Oct 2 19:01:21.387045 kubelet[1448]: I1002 19:01:21.386998 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/d89d6de6-088e-4d24-918a-66a4080967e8-varrun\") pod \"csi-node-driver-5rj8j\" (UID: \"d89d6de6-088e-4d24-918a-66a4080967e8\") " pod="calico-system/csi-node-driver-5rj8j" Oct 2 19:01:21.387342 kubelet[1448]: I1002 19:01:21.387326 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/d89d6de6-088e-4d24-918a-66a4080967e8-kubelet-dir\") pod \"csi-node-driver-5rj8j\" (UID: \"d89d6de6-088e-4d24-918a-66a4080967e8\") " pod="calico-system/csi-node-driver-5rj8j" Oct 2 19:01:21.387615 kubelet[1448]: I1002 19:01:21.387539 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-45h2j\" (UniqueName: \"kubernetes.io/projected/0d297819-9559-41aa-ad73-d0513ee97a58-kube-api-access-45h2j\") pod \"coredns-565d847f94-j8cdb\" (UID: \"0d297819-9559-41aa-ad73-d0513ee97a58\") " pod="kube-system/coredns-565d847f94-j8cdb" Oct 2 19:01:21.387866 kubelet[1448]: I1002 19:01:21.387826 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etccalico\" (UniqueName: \"kubernetes.io/host-path/d89d6de6-088e-4d24-918a-66a4080967e8-etccalico\") pod \"csi-node-driver-5rj8j\" (UID: \"d89d6de6-088e-4d24-918a-66a4080967e8\") " pod="calico-system/csi-node-driver-5rj8j" Oct 2 19:01:21.388089 kubelet[1448]: I1002 19:01:21.388071 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/0d297819-9559-41aa-ad73-d0513ee97a58-config-volume\") pod \"coredns-565d847f94-j8cdb\" (UID: \"0d297819-9559-41aa-ad73-d0513ee97a58\") " pod="kube-system/coredns-565d847f94-j8cdb" Oct 2 19:01:21.388270 kubelet[1448]: I1002 19:01:21.388250 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-drdcd\" (UniqueName: \"kubernetes.io/projected/0393487d-b389-48c4-bdba-e7cb93af3f9e-kube-api-access-drdcd\") pod \"coredns-565d847f94-4qmfj\" (UID: \"0393487d-b389-48c4-bdba-e7cb93af3f9e\") " pod="kube-system/coredns-565d847f94-4qmfj" Oct 2 19:01:21.388492 kubelet[1448]: I1002 19:01:21.388477 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/0393487d-b389-48c4-bdba-e7cb93af3f9e-config-volume\") pod \"coredns-565d847f94-4qmfj\" (UID: \"0393487d-b389-48c4-bdba-e7cb93af3f9e\") " pod="kube-system/coredns-565d847f94-4qmfj" Oct 2 19:01:21.388703 kubelet[1448]: I1002 19:01:21.388685 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/d89d6de6-088e-4d24-918a-66a4080967e8-socket-dir\") pod \"csi-node-driver-5rj8j\" (UID: \"d89d6de6-088e-4d24-918a-66a4080967e8\") " pod="calico-system/csi-node-driver-5rj8j" Oct 2 19:01:21.388970 kubelet[1448]: I1002 19:01:21.388928 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/d89d6de6-088e-4d24-918a-66a4080967e8-registration-dir\") pod \"csi-node-driver-5rj8j\" (UID: \"d89d6de6-088e-4d24-918a-66a4080967e8\") " pod="calico-system/csi-node-driver-5rj8j" Oct 2 19:01:21.389122 kubelet[1448]: I1002 19:01:21.389109 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cg4x8\" (UniqueName: \"kubernetes.io/projected/e989a528-70bb-4f1d-99d6-ce3d072d1612-kube-api-access-cg4x8\") pod \"calico-kube-controllers-69d9c784fb-zk68w\" (UID: \"e989a528-70bb-4f1d-99d6-ce3d072d1612\") " pod="calico-system/calico-kube-controllers-69d9c784fb-zk68w" Oct 2 19:01:21.578199 kubelet[1448]: E1002 19:01:21.578153 1448 dns.go:157] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:01:21.578769 env[1147]: time="2023-10-02T19:01:21.578676434Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-565d847f94-j8cdb,Uid:0d297819-9559-41aa-ad73-d0513ee97a58,Namespace:kube-system,Attempt:0,}" Oct 2 19:01:21.590460 env[1147]: time="2023-10-02T19:01:21.590299540Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-5rj8j,Uid:d89d6de6-088e-4d24-918a-66a4080967e8,Namespace:calico-system,Attempt:0,}" Oct 2 19:01:21.754601 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calidbe612d3769: link becomes ready Oct 2 19:01:21.766038 systemd-networkd[1050]: calidbe612d3769: Link UP Oct 2 19:01:21.766043 systemd-networkd[1050]: calidbe612d3769: Gained carrier Oct 2 19:01:21.777457 env[1147]: 2023-10-02 19:01:21.642 [INFO][2381] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {10.0.0.82-k8s-coredns--565d847f94--j8cdb-eth0 coredns-565d847f94- kube-system 0d297819-9559-41aa-ad73-d0513ee97a58 961 0 2023-10-02 19:00:12 +0000 UTC map[k8s-app:kube-dns pod-template-hash:565d847f94 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s 10.0.0.82 coredns-565d847f94-j8cdb eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calidbe612d3769 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7" Namespace="kube-system" Pod="coredns-565d847f94-j8cdb" WorkloadEndpoint="10.0.0.82-k8s-coredns--565d847f94--j8cdb-" Oct 2 19:01:21.777457 env[1147]: 2023-10-02 19:01:21.644 [INFO][2381] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7" Namespace="kube-system" Pod="coredns-565d847f94-j8cdb" WorkloadEndpoint="10.0.0.82-k8s-coredns--565d847f94--j8cdb-eth0" Oct 2 19:01:21.777457 env[1147]: 2023-10-02 19:01:21.704 [INFO][2408] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7" HandleID="k8s-pod-network.70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7" Workload="10.0.0.82-k8s-coredns--565d847f94--j8cdb-eth0" Oct 2 19:01:21.777457 env[1147]: 2023-10-02 19:01:21.720 [INFO][2408] ipam_plugin.go 269: Auto assigning IP ContainerID="70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7" HandleID="k8s-pod-network.70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7" Workload="10.0.0.82-k8s-coredns--565d847f94--j8cdb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004d8a0), Attrs:map[string]string{"namespace":"kube-system", "node":"10.0.0.82", "pod":"coredns-565d847f94-j8cdb", "timestamp":"2023-10-02 19:01:21.704581079 +0000 UTC"}, Hostname:"10.0.0.82", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:01:21.777457 env[1147]: time="2023-10-02T19:01:21Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:01:21.777457 env[1147]: time="2023-10-02T19:01:21Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:01:21.777457 env[1147]: 2023-10-02 19:01:21.720 [INFO][2408] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host '10.0.0.82' Oct 2 19:01:21.777457 env[1147]: 2023-10-02 19:01:21.722 [INFO][2408] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7" host="10.0.0.82" Oct 2 19:01:21.777457 env[1147]: 2023-10-02 19:01:21.726 [INFO][2408] ipam.go 372: Looking up existing affinities for host host="10.0.0.82" Oct 2 19:01:21.777457 env[1147]: 2023-10-02 19:01:21.730 [INFO][2408] ipam.go 489: Trying affinity for 192.168.61.64/26 host="10.0.0.82" Oct 2 19:01:21.777457 env[1147]: 2023-10-02 19:01:21.733 [INFO][2408] ipam.go 155: Attempting to load block cidr=192.168.61.64/26 host="10.0.0.82" Oct 2 19:01:21.777457 env[1147]: 2023-10-02 19:01:21.737 [INFO][2408] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.61.64/26 host="10.0.0.82" Oct 2 19:01:21.777457 env[1147]: 2023-10-02 19:01:21.737 [INFO][2408] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.61.64/26 handle="k8s-pod-network.70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7" host="10.0.0.82" Oct 2 19:01:21.777457 env[1147]: 2023-10-02 19:01:21.740 [INFO][2408] ipam.go 1682: Creating new handle: k8s-pod-network.70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7 Oct 2 19:01:21.777457 env[1147]: 2023-10-02 19:01:21.745 [INFO][2408] ipam.go 1203: Writing block in order to claim IPs block=192.168.61.64/26 handle="k8s-pod-network.70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7" host="10.0.0.82" Oct 2 19:01:21.777457 env[1147]: 2023-10-02 19:01:21.750 [INFO][2408] ipam.go 1216: Successfully claimed IPs: [192.168.61.65/26] block=192.168.61.64/26 handle="k8s-pod-network.70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7" host="10.0.0.82" Oct 2 19:01:21.777457 env[1147]: 2023-10-02 19:01:21.750 [INFO][2408] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.61.65/26] handle="k8s-pod-network.70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7" host="10.0.0.82" Oct 2 19:01:21.777457 env[1147]: time="2023-10-02T19:01:21Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:01:21.777457 env[1147]: 2023-10-02 19:01:21.750 [INFO][2408] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.61.65/26] IPv6=[] ContainerID="70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7" HandleID="k8s-pod-network.70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7" Workload="10.0.0.82-k8s-coredns--565d847f94--j8cdb-eth0" Oct 2 19:01:21.778029 env[1147]: 2023-10-02 19:01:21.752 [INFO][2381] k8s.go 383: Populated endpoint ContainerID="70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7" Namespace="kube-system" Pod="coredns-565d847f94-j8cdb" WorkloadEndpoint="10.0.0.82-k8s-coredns--565d847f94--j8cdb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82-k8s-coredns--565d847f94--j8cdb-eth0", GenerateName:"coredns-565d847f94-", Namespace:"kube-system", SelfLink:"", UID:"0d297819-9559-41aa-ad73-d0513ee97a58", ResourceVersion:"961", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 0, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"565d847f94", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.82", ContainerID:"", Pod:"coredns-565d847f94-j8cdb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.61.65/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calidbe612d3769", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:01:21.778029 env[1147]: 2023-10-02 19:01:21.752 [INFO][2381] k8s.go 384: Calico CNI using IPs: [192.168.61.65/32] ContainerID="70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7" Namespace="kube-system" Pod="coredns-565d847f94-j8cdb" WorkloadEndpoint="10.0.0.82-k8s-coredns--565d847f94--j8cdb-eth0" Oct 2 19:01:21.778029 env[1147]: 2023-10-02 19:01:21.752 [INFO][2381] dataplane_linux.go 68: Setting the host side veth name to calidbe612d3769 ContainerID="70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7" Namespace="kube-system" Pod="coredns-565d847f94-j8cdb" WorkloadEndpoint="10.0.0.82-k8s-coredns--565d847f94--j8cdb-eth0" Oct 2 19:01:21.778029 env[1147]: 2023-10-02 19:01:21.754 [INFO][2381] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7" Namespace="kube-system" Pod="coredns-565d847f94-j8cdb" WorkloadEndpoint="10.0.0.82-k8s-coredns--565d847f94--j8cdb-eth0" Oct 2 19:01:21.778029 env[1147]: 2023-10-02 19:01:21.765 [INFO][2381] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7" Namespace="kube-system" Pod="coredns-565d847f94-j8cdb" WorkloadEndpoint="10.0.0.82-k8s-coredns--565d847f94--j8cdb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82-k8s-coredns--565d847f94--j8cdb-eth0", GenerateName:"coredns-565d847f94-", Namespace:"kube-system", SelfLink:"", UID:"0d297819-9559-41aa-ad73-d0513ee97a58", ResourceVersion:"961", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 0, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"565d847f94", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.82", ContainerID:"70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7", Pod:"coredns-565d847f94-j8cdb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.61.65/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calidbe612d3769", MAC:"56:8a:74:39:5e:6a", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:01:21.778029 env[1147]: 2023-10-02 19:01:21.772 [INFO][2381] k8s.go 489: Wrote updated endpoint to datastore ContainerID="70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7" Namespace="kube-system" Pod="coredns-565d847f94-j8cdb" WorkloadEndpoint="10.0.0.82-k8s-coredns--565d847f94--j8cdb-eth0" Oct 2 19:01:21.784045 kubelet[1448]: E1002 19:01:21.783991 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:21.789587 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia1a58909a01: link becomes ready Oct 2 19:01:21.795863 systemd-networkd[1050]: calia1a58909a01: Link UP Oct 2 19:01:21.795870 systemd-networkd[1050]: calia1a58909a01: Gained carrier Oct 2 19:01:21.802300 env[1147]: time="2023-10-02T19:01:21.802208078Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:01:21.802300 env[1147]: time="2023-10-02T19:01:21.802262278Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:01:21.802300 env[1147]: time="2023-10-02T19:01:21.802273078Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:01:21.802827 env[1147]: time="2023-10-02T19:01:21.802785558Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7 pid=2442 runtime=io.containerd.runc.v2 Oct 2 19:01:21.807859 env[1147]: 2023-10-02 19:01:21.649 [INFO][2393] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {10.0.0.82-k8s-csi--node--driver--5rj8j-eth0 csi-node-driver- calico-system d89d6de6-088e-4d24-918a-66a4080967e8 967 0 2023-10-02 19:01:21 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:fd56fb8dc k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s 10.0.0.82 csi-node-driver-5rj8j eth0 default [] [] [kns.calico-system ksa.calico-system.default] calia1a58909a01 [] []}} ContainerID="ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d" Namespace="calico-system" Pod="csi-node-driver-5rj8j" WorkloadEndpoint="10.0.0.82-k8s-csi--node--driver--5rj8j-" Oct 2 19:01:21.807859 env[1147]: 2023-10-02 19:01:21.649 [INFO][2393] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d" Namespace="calico-system" Pod="csi-node-driver-5rj8j" WorkloadEndpoint="10.0.0.82-k8s-csi--node--driver--5rj8j-eth0" Oct 2 19:01:21.807859 env[1147]: 2023-10-02 19:01:21.704 [INFO][2409] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d" HandleID="k8s-pod-network.ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d" Workload="10.0.0.82-k8s-csi--node--driver--5rj8j-eth0" Oct 2 19:01:21.807859 env[1147]: 2023-10-02 19:01:21.722 [INFO][2409] ipam_plugin.go 269: Auto assigning IP ContainerID="ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d" HandleID="k8s-pod-network.ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d" Workload="10.0.0.82-k8s-csi--node--driver--5rj8j-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40003a34f0), Attrs:map[string]string{"namespace":"calico-system", "node":"10.0.0.82", "pod":"csi-node-driver-5rj8j", "timestamp":"2023-10-02 19:01:21.704580959 +0000 UTC"}, Hostname:"10.0.0.82", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:01:21.807859 env[1147]: time="2023-10-02T19:01:21Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:01:21.807859 env[1147]: time="2023-10-02T19:01:21Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:01:21.807859 env[1147]: 2023-10-02 19:01:21.750 [INFO][2409] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host '10.0.0.82' Oct 2 19:01:21.807859 env[1147]: 2023-10-02 19:01:21.753 [INFO][2409] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d" host="10.0.0.82" Oct 2 19:01:21.807859 env[1147]: 2023-10-02 19:01:21.757 [INFO][2409] ipam.go 372: Looking up existing affinities for host host="10.0.0.82" Oct 2 19:01:21.807859 env[1147]: 2023-10-02 19:01:21.762 [INFO][2409] ipam.go 489: Trying affinity for 192.168.61.64/26 host="10.0.0.82" Oct 2 19:01:21.807859 env[1147]: 2023-10-02 19:01:21.764 [INFO][2409] ipam.go 155: Attempting to load block cidr=192.168.61.64/26 host="10.0.0.82" Oct 2 19:01:21.807859 env[1147]: 2023-10-02 19:01:21.767 [INFO][2409] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.61.64/26 host="10.0.0.82" Oct 2 19:01:21.807859 env[1147]: 2023-10-02 19:01:21.767 [INFO][2409] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.61.64/26 handle="k8s-pod-network.ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d" host="10.0.0.82" Oct 2 19:01:21.807859 env[1147]: 2023-10-02 19:01:21.771 [INFO][2409] ipam.go 1682: Creating new handle: k8s-pod-network.ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d Oct 2 19:01:21.807859 env[1147]: 2023-10-02 19:01:21.777 [INFO][2409] ipam.go 1203: Writing block in order to claim IPs block=192.168.61.64/26 handle="k8s-pod-network.ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d" host="10.0.0.82" Oct 2 19:01:21.807859 env[1147]: 2023-10-02 19:01:21.784 [INFO][2409] ipam.go 1216: Successfully claimed IPs: [192.168.61.66/26] block=192.168.61.64/26 handle="k8s-pod-network.ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d" host="10.0.0.82" Oct 2 19:01:21.807859 env[1147]: 2023-10-02 19:01:21.785 [INFO][2409] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.61.66/26] handle="k8s-pod-network.ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d" host="10.0.0.82" Oct 2 19:01:21.807859 env[1147]: time="2023-10-02T19:01:21Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:01:21.807859 env[1147]: 2023-10-02 19:01:21.785 [INFO][2409] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.61.66/26] IPv6=[] ContainerID="ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d" HandleID="k8s-pod-network.ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d" Workload="10.0.0.82-k8s-csi--node--driver--5rj8j-eth0" Oct 2 19:01:21.808403 env[1147]: 2023-10-02 19:01:21.786 [INFO][2393] k8s.go 383: Populated endpoint ContainerID="ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d" Namespace="calico-system" Pod="csi-node-driver-5rj8j" WorkloadEndpoint="10.0.0.82-k8s-csi--node--driver--5rj8j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82-k8s-csi--node--driver--5rj8j-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d89d6de6-088e-4d24-918a-66a4080967e8", ResourceVersion:"967", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 1, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"fd56fb8dc", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.82", ContainerID:"", Pod:"csi-node-driver-5rj8j", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.61.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calia1a58909a01", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:01:21.808403 env[1147]: 2023-10-02 19:01:21.787 [INFO][2393] k8s.go 384: Calico CNI using IPs: [192.168.61.66/32] ContainerID="ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d" Namespace="calico-system" Pod="csi-node-driver-5rj8j" WorkloadEndpoint="10.0.0.82-k8s-csi--node--driver--5rj8j-eth0" Oct 2 19:01:21.808403 env[1147]: 2023-10-02 19:01:21.787 [INFO][2393] dataplane_linux.go 68: Setting the host side veth name to calia1a58909a01 ContainerID="ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d" Namespace="calico-system" Pod="csi-node-driver-5rj8j" WorkloadEndpoint="10.0.0.82-k8s-csi--node--driver--5rj8j-eth0" Oct 2 19:01:21.808403 env[1147]: 2023-10-02 19:01:21.789 [INFO][2393] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d" Namespace="calico-system" Pod="csi-node-driver-5rj8j" WorkloadEndpoint="10.0.0.82-k8s-csi--node--driver--5rj8j-eth0" Oct 2 19:01:21.808403 env[1147]: 2023-10-02 19:01:21.796 [INFO][2393] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d" Namespace="calico-system" Pod="csi-node-driver-5rj8j" WorkloadEndpoint="10.0.0.82-k8s-csi--node--driver--5rj8j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82-k8s-csi--node--driver--5rj8j-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d89d6de6-088e-4d24-918a-66a4080967e8", ResourceVersion:"967", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 1, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"fd56fb8dc", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.82", ContainerID:"ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d", Pod:"csi-node-driver-5rj8j", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.61.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calia1a58909a01", MAC:"7a:ec:cd:fe:a3:7d", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:01:21.808403 env[1147]: 2023-10-02 19:01:21.805 [INFO][2393] k8s.go 489: Wrote updated endpoint to datastore ContainerID="ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d" Namespace="calico-system" Pod="csi-node-driver-5rj8j" WorkloadEndpoint="10.0.0.82-k8s-csi--node--driver--5rj8j-eth0" Oct 2 19:01:21.817429 systemd[1]: Started cri-containerd-70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7.scope. Oct 2 19:01:21.827234 env[1147]: time="2023-10-02T19:01:21.827153728Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:01:21.827234 env[1147]: time="2023-10-02T19:01:21.827194208Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:01:21.827234 env[1147]: time="2023-10-02T19:01:21.827205567Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:01:21.827627 env[1147]: time="2023-10-02T19:01:21.827590087Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d pid=2482 runtime=io.containerd.runc.v2 Oct 2 19:01:21.842212 systemd[1]: Started cri-containerd-ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d.scope. Oct 2 19:01:21.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.850000 audit: BPF prog-id=92 op=LOAD Oct 2 19:01:21.852000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.852000 audit[2451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2442 pid=2451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:21.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730363537363034663865666133373036316634343263636434376439 Oct 2 19:01:21.852000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.852000 audit[2451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2442 pid=2451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:21.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730363537363034663865666133373036316634343263636434376439 Oct 2 19:01:21.852000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.852000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.852000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.852000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.852000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.852000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.852000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.852000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.852000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.852000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.852000 audit: BPF prog-id=93 op=LOAD Oct 2 19:01:21.852000 audit[2451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2442 pid=2451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:21.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730363537363034663865666133373036316634343263636434376439 Oct 2 19:01:21.853000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.853000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.853000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.853000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.853000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.853000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.853000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.853000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.853000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.853000 audit: BPF prog-id=94 op=LOAD Oct 2 19:01:21.853000 audit[2451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2442 pid=2451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:21.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730363537363034663865666133373036316634343263636434376439 Oct 2 19:01:21.853000 audit: BPF prog-id=94 op=UNLOAD Oct 2 19:01:21.853000 audit: BPF prog-id=93 op=UNLOAD Oct 2 19:01:21.853000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.853000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.853000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.853000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.853000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.853000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.853000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.853000 audit[2451]: AVC avc: denied { perfmon } for pid=2451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.853000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.853000 audit[2451]: AVC avc: denied { bpf } for pid=2451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.853000 audit: BPF prog-id=95 op=LOAD Oct 2 19:01:21.853000 audit[2451]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2442 pid=2451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:21.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730363537363034663865666133373036316634343263636434376439 Oct 2 19:01:21.856407 systemd-resolved[1092]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 19:01:21.866000 audit[2520]: NETFILTER_CFG table=filter:83 family=2 entries=68 op=nft_register_chain pid=2520 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:01:21.866000 audit[2520]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=38072 a0=3 a1=ffffdc18b540 a2=0 a3=ffffba648fa0 items=0 ppid=2174 pid=2520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:21.866000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:01:21.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.875000 audit: BPF prog-id=96 op=LOAD Oct 2 19:01:21.875000 audit[2493]: AVC avc: denied { bpf } for pid=2493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.875000 audit[2493]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2482 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:21.875000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361353433666432623738323536623335343732653038633532353739 Oct 2 19:01:21.876000 audit[2493]: AVC avc: denied { perfmon } for pid=2493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.876000 audit[2493]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2482 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:21.876000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361353433666432623738323536623335343732653038633532353739 Oct 2 19:01:21.876000 audit[2493]: AVC avc: denied { bpf } for pid=2493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.876000 audit[2493]: AVC avc: denied { bpf } for pid=2493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.876000 audit[2493]: AVC avc: denied { bpf } for pid=2493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.876000 audit[2493]: AVC avc: denied { perfmon } for pid=2493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.876000 audit[2493]: AVC avc: denied { perfmon } for pid=2493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.876000 audit[2493]: AVC avc: denied { perfmon } for pid=2493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.876000 audit[2493]: AVC avc: denied { perfmon } for pid=2493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.876000 audit[2493]: AVC avc: denied { perfmon } for pid=2493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.876000 audit[2493]: AVC avc: denied { bpf } for pid=2493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.876000 audit[2493]: AVC avc: denied { bpf } for pid=2493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.876000 audit: BPF prog-id=97 op=LOAD Oct 2 19:01:21.876000 audit[2493]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2482 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:21.876000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361353433666432623738323536623335343732653038633532353739 Oct 2 19:01:21.877000 audit[2493]: AVC avc: denied { bpf } for pid=2493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.877000 audit[2493]: AVC avc: denied { bpf } for pid=2493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.877000 audit[2493]: AVC avc: denied { perfmon } for pid=2493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.877000 audit[2493]: AVC avc: denied { perfmon } for pid=2493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.877000 audit[2493]: AVC avc: denied { perfmon } for pid=2493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.877000 audit[2493]: AVC avc: denied { perfmon } for pid=2493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.877000 audit[2493]: AVC avc: denied { perfmon } for pid=2493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.877000 audit[2493]: AVC avc: denied { bpf } for pid=2493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.877000 audit[2493]: AVC avc: denied { bpf } for pid=2493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.877000 audit: BPF prog-id=98 op=LOAD Oct 2 19:01:21.877000 audit[2493]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2482 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:21.877000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361353433666432623738323536623335343732653038633532353739 Oct 2 19:01:21.877000 audit: BPF prog-id=98 op=UNLOAD Oct 2 19:01:21.877000 audit: BPF prog-id=97 op=UNLOAD Oct 2 19:01:21.877000 audit[2493]: AVC avc: denied { bpf } for pid=2493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.877000 audit[2493]: AVC avc: denied { bpf } for pid=2493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.877000 audit[2493]: AVC avc: denied { bpf } for pid=2493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.877000 audit[2493]: AVC avc: denied { perfmon } for pid=2493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.877000 audit[2493]: AVC avc: denied { perfmon } for pid=2493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.877000 audit[2493]: AVC avc: denied { perfmon } for pid=2493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.877000 audit[2493]: AVC avc: denied { perfmon } for pid=2493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.877000 audit[2493]: AVC avc: denied { perfmon } for pid=2493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.877000 audit[2493]: AVC avc: denied { bpf } for pid=2493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.877000 audit[2493]: AVC avc: denied { bpf } for pid=2493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:21.877000 audit: BPF prog-id=99 op=LOAD Oct 2 19:01:21.877000 audit[2493]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2482 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:21.877000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361353433666432623738323536623335343732653038633532353739 Oct 2 19:01:21.880475 systemd-resolved[1092]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 19:01:21.884542 env[1147]: time="2023-10-02T19:01:21.884473377Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69d9c784fb-zk68w,Uid:e989a528-70bb-4f1d-99d6-ce3d072d1612,Namespace:calico-system,Attempt:0,}" Oct 2 19:01:21.886848 env[1147]: time="2023-10-02T19:01:21.886800374Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-565d847f94-j8cdb,Uid:0d297819-9559-41aa-ad73-d0513ee97a58,Namespace:kube-system,Attempt:0,} returns sandbox id \"70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7\"" Oct 2 19:01:21.887089 kubelet[1448]: E1002 19:01:21.887070 1448 dns.go:157] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:01:21.887906 env[1147]: time="2023-10-02T19:01:21.887872213Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-565d847f94-4qmfj,Uid:0393487d-b389-48c4-bdba-e7cb93af3f9e,Namespace:kube-system,Attempt:0,}" Oct 2 19:01:21.888656 kubelet[1448]: E1002 19:01:21.888633 1448 dns.go:157] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:01:21.889765 env[1147]: time="2023-10-02T19:01:21.889632211Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 19:01:21.901342 env[1147]: time="2023-10-02T19:01:21.901284236Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-5rj8j,Uid:d89d6de6-088e-4d24-918a-66a4080967e8,Namespace:calico-system,Attempt:0,} returns sandbox id \"ca543fd2b78256b35472e08c52579ac39a5cc8d92fe28f45d91a3e28eff49a4d\"" Oct 2 19:01:22.063546 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliaf0669711f5: link becomes ready Oct 2 19:01:22.072076 systemd-networkd[1050]: caliaf0669711f5: Link UP Oct 2 19:01:22.072082 systemd-networkd[1050]: caliaf0669711f5: Gained carrier Oct 2 19:01:22.083387 env[1147]: 2023-10-02 19:01:21.939 [INFO][2538] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {10.0.0.82-k8s-coredns--565d847f94--4qmfj-eth0 coredns-565d847f94- kube-system 0393487d-b389-48c4-bdba-e7cb93af3f9e 966 0 2023-10-02 19:00:12 +0000 UTC map[k8s-app:kube-dns pod-template-hash:565d847f94 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s 10.0.0.82 coredns-565d847f94-4qmfj eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] caliaf0669711f5 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8" Namespace="kube-system" Pod="coredns-565d847f94-4qmfj" WorkloadEndpoint="10.0.0.82-k8s-coredns--565d847f94--4qmfj-" Oct 2 19:01:22.083387 env[1147]: 2023-10-02 19:01:21.940 [INFO][2538] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8" Namespace="kube-system" Pod="coredns-565d847f94-4qmfj" WorkloadEndpoint="10.0.0.82-k8s-coredns--565d847f94--4qmfj-eth0" Oct 2 19:01:22.083387 env[1147]: 2023-10-02 19:01:21.970 [INFO][2566] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8" HandleID="k8s-pod-network.f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8" Workload="10.0.0.82-k8s-coredns--565d847f94--4qmfj-eth0" Oct 2 19:01:22.083387 env[1147]: 2023-10-02 19:01:22.008 [INFO][2566] ipam_plugin.go 269: Auto assigning IP ContainerID="f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8" HandleID="k8s-pod-network.f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8" Workload="10.0.0.82-k8s-coredns--565d847f94--4qmfj-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000493090), Attrs:map[string]string{"namespace":"kube-system", "node":"10.0.0.82", "pod":"coredns-565d847f94-4qmfj", "timestamp":"2023-10-02 19:01:21.970394511 +0000 UTC"}, Hostname:"10.0.0.82", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:01:22.083387 env[1147]: time="2023-10-02T19:01:22Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:01:22.083387 env[1147]: time="2023-10-02T19:01:22Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:01:22.083387 env[1147]: 2023-10-02 19:01:22.008 [INFO][2566] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host '10.0.0.82' Oct 2 19:01:22.083387 env[1147]: 2023-10-02 19:01:22.010 [INFO][2566] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8" host="10.0.0.82" Oct 2 19:01:22.083387 env[1147]: 2023-10-02 19:01:22.020 [INFO][2566] ipam.go 372: Looking up existing affinities for host host="10.0.0.82" Oct 2 19:01:22.083387 env[1147]: 2023-10-02 19:01:22.025 [INFO][2566] ipam.go 489: Trying affinity for 192.168.61.64/26 host="10.0.0.82" Oct 2 19:01:22.083387 env[1147]: 2023-10-02 19:01:22.033 [INFO][2566] ipam.go 155: Attempting to load block cidr=192.168.61.64/26 host="10.0.0.82" Oct 2 19:01:22.083387 env[1147]: 2023-10-02 19:01:22.039 [INFO][2566] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.61.64/26 host="10.0.0.82" Oct 2 19:01:22.083387 env[1147]: 2023-10-02 19:01:22.039 [INFO][2566] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.61.64/26 handle="k8s-pod-network.f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8" host="10.0.0.82" Oct 2 19:01:22.083387 env[1147]: 2023-10-02 19:01:22.042 [INFO][2566] ipam.go 1682: Creating new handle: k8s-pod-network.f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8 Oct 2 19:01:22.083387 env[1147]: 2023-10-02 19:01:22.049 [INFO][2566] ipam.go 1203: Writing block in order to claim IPs block=192.168.61.64/26 handle="k8s-pod-network.f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8" host="10.0.0.82" Oct 2 19:01:22.083387 env[1147]: 2023-10-02 19:01:22.059 [INFO][2566] ipam.go 1216: Successfully claimed IPs: [192.168.61.67/26] block=192.168.61.64/26 handle="k8s-pod-network.f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8" host="10.0.0.82" Oct 2 19:01:22.083387 env[1147]: 2023-10-02 19:01:22.059 [INFO][2566] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.61.67/26] handle="k8s-pod-network.f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8" host="10.0.0.82" Oct 2 19:01:22.083387 env[1147]: time="2023-10-02T19:01:22Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:01:22.083387 env[1147]: 2023-10-02 19:01:22.059 [INFO][2566] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.61.67/26] IPv6=[] ContainerID="f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8" HandleID="k8s-pod-network.f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8" Workload="10.0.0.82-k8s-coredns--565d847f94--4qmfj-eth0" Oct 2 19:01:22.083937 env[1147]: 2023-10-02 19:01:22.061 [INFO][2538] k8s.go 383: Populated endpoint ContainerID="f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8" Namespace="kube-system" Pod="coredns-565d847f94-4qmfj" WorkloadEndpoint="10.0.0.82-k8s-coredns--565d847f94--4qmfj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82-k8s-coredns--565d847f94--4qmfj-eth0", GenerateName:"coredns-565d847f94-", Namespace:"kube-system", SelfLink:"", UID:"0393487d-b389-48c4-bdba-e7cb93af3f9e", ResourceVersion:"966", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 0, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"565d847f94", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.82", ContainerID:"", Pod:"coredns-565d847f94-4qmfj", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.61.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliaf0669711f5", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:01:22.083937 env[1147]: 2023-10-02 19:01:22.061 [INFO][2538] k8s.go 384: Calico CNI using IPs: [192.168.61.67/32] ContainerID="f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8" Namespace="kube-system" Pod="coredns-565d847f94-4qmfj" WorkloadEndpoint="10.0.0.82-k8s-coredns--565d847f94--4qmfj-eth0" Oct 2 19:01:22.083937 env[1147]: 2023-10-02 19:01:22.061 [INFO][2538] dataplane_linux.go 68: Setting the host side veth name to caliaf0669711f5 ContainerID="f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8" Namespace="kube-system" Pod="coredns-565d847f94-4qmfj" WorkloadEndpoint="10.0.0.82-k8s-coredns--565d847f94--4qmfj-eth0" Oct 2 19:01:22.083937 env[1147]: 2023-10-02 19:01:22.063 [INFO][2538] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8" Namespace="kube-system" Pod="coredns-565d847f94-4qmfj" WorkloadEndpoint="10.0.0.82-k8s-coredns--565d847f94--4qmfj-eth0" Oct 2 19:01:22.083937 env[1147]: 2023-10-02 19:01:22.072 [INFO][2538] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8" Namespace="kube-system" Pod="coredns-565d847f94-4qmfj" WorkloadEndpoint="10.0.0.82-k8s-coredns--565d847f94--4qmfj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82-k8s-coredns--565d847f94--4qmfj-eth0", GenerateName:"coredns-565d847f94-", Namespace:"kube-system", SelfLink:"", UID:"0393487d-b389-48c4-bdba-e7cb93af3f9e", ResourceVersion:"966", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 0, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"565d847f94", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.82", ContainerID:"f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8", Pod:"coredns-565d847f94-4qmfj", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.61.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliaf0669711f5", MAC:"ce:20:02:30:39:8a", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:01:22.083937 env[1147]: 2023-10-02 19:01:22.081 [INFO][2538] k8s.go 489: Wrote updated endpoint to datastore ContainerID="f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8" Namespace="kube-system" Pod="coredns-565d847f94-4qmfj" WorkloadEndpoint="10.0.0.82-k8s-coredns--565d847f94--4qmfj-eth0" Oct 2 19:01:22.085976 systemd-networkd[1050]: vxlan.calico: Link UP Oct 2 19:01:22.085982 systemd-networkd[1050]: vxlan.calico: Gained carrier Oct 2 19:01:22.103121 env[1147]: time="2023-10-02T19:01:22.102990755Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:01:22.103121 env[1147]: time="2023-10-02T19:01:22.103080635Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:01:22.103297 env[1147]: time="2023-10-02T19:01:22.103092555Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:01:22.103341 env[1147]: time="2023-10-02T19:01:22.103293715Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8 pid=2600 runtime=io.containerd.runc.v2 Oct 2 19:01:22.116673 systemd[1]: Started cri-containerd-f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8.scope. Oct 2 19:01:22.136533 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali27db373619e: link becomes ready Oct 2 19:01:22.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.136000 audit: BPF prog-id=100 op=LOAD Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { bpf } for pid=2610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2600 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:22.137000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631373534336235326431313461616162313031646132623935336262 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { perfmon } for pid=2610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2600 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:22.137000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631373534336235326431313461616162313031646132623935336262 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { bpf } for pid=2610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { bpf } for pid=2610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { bpf } for pid=2610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { perfmon } for pid=2610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { perfmon } for pid=2610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { perfmon } for pid=2610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { perfmon } for pid=2610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { perfmon } for pid=2610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { bpf } for pid=2610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { bpf } for pid=2610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit: BPF prog-id=101 op=LOAD Oct 2 19:01:22.137000 audit[2610]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2600 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:22.137000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631373534336235326431313461616162313031646132623935336262 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { bpf } for pid=2610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { bpf } for pid=2610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { perfmon } for pid=2610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { perfmon } for pid=2610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { perfmon } for pid=2610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { perfmon } for pid=2610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { perfmon } for pid=2610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { bpf } for pid=2610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { bpf } for pid=2610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit: BPF prog-id=102 op=LOAD Oct 2 19:01:22.137000 audit[2610]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2600 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:22.137000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631373534336235326431313461616162313031646132623935336262 Oct 2 19:01:22.137000 audit: BPF prog-id=102 op=UNLOAD Oct 2 19:01:22.137000 audit: BPF prog-id=101 op=UNLOAD Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { bpf } for pid=2610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { bpf } for pid=2610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { bpf } for pid=2610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { perfmon } for pid=2610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { perfmon } for pid=2610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { perfmon } for pid=2610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { perfmon } for pid=2610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { perfmon } for pid=2610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { bpf } for pid=2610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit[2610]: AVC avc: denied { bpf } for pid=2610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.137000 audit: BPF prog-id=103 op=LOAD Oct 2 19:01:22.137000 audit[2610]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2600 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:22.137000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631373534336235326431313461616162313031646132623935336262 Oct 2 19:01:22.139577 systemd-resolved[1092]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 19:01:22.144135 systemd-networkd[1050]: cali27db373619e: Link UP Oct 2 19:01:22.144141 systemd-networkd[1050]: cali27db373619e: Gained carrier Oct 2 19:01:22.157833 env[1147]: 2023-10-02 19:01:21.940 [INFO][2536] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {10.0.0.82-k8s-calico--kube--controllers--69d9c784fb--zk68w-eth0 calico-kube-controllers-69d9c784fb- calico-system e989a528-70bb-4f1d-99d6-ce3d072d1612 965 0 2023-10-02 19:00:17 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:69d9c784fb projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s 10.0.0.82 calico-kube-controllers-69d9c784fb-zk68w eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali27db373619e [] []}} ContainerID="77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-zk68w" WorkloadEndpoint="10.0.0.82-k8s-calico--kube--controllers--69d9c784fb--zk68w-" Oct 2 19:01:22.157833 env[1147]: 2023-10-02 19:01:21.940 [INFO][2536] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-zk68w" WorkloadEndpoint="10.0.0.82-k8s-calico--kube--controllers--69d9c784fb--zk68w-eth0" Oct 2 19:01:22.157833 env[1147]: 2023-10-02 19:01:21.971 [INFO][2567] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a" HandleID="k8s-pod-network.77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a" Workload="10.0.0.82-k8s-calico--kube--controllers--69d9c784fb--zk68w-eth0" Oct 2 19:01:22.157833 env[1147]: 2023-10-02 19:01:22.010 [INFO][2567] ipam_plugin.go 269: Auto assigning IP ContainerID="77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a" HandleID="k8s-pod-network.77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a" Workload="10.0.0.82-k8s-calico--kube--controllers--69d9c784fb--zk68w-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40005071c0), Attrs:map[string]string{"namespace":"calico-system", "node":"10.0.0.82", "pod":"calico-kube-controllers-69d9c784fb-zk68w", "timestamp":"2023-10-02 19:01:21.97154531 +0000 UTC"}, Hostname:"10.0.0.82", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:01:22.157833 env[1147]: time="2023-10-02T19:01:22Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:01:22.157833 env[1147]: time="2023-10-02T19:01:22Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:01:22.157833 env[1147]: 2023-10-02 19:01:22.059 [INFO][2567] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host '10.0.0.82' Oct 2 19:01:22.157833 env[1147]: 2023-10-02 19:01:22.069 [INFO][2567] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a" host="10.0.0.82" Oct 2 19:01:22.157833 env[1147]: 2023-10-02 19:01:22.092 [INFO][2567] ipam.go 372: Looking up existing affinities for host host="10.0.0.82" Oct 2 19:01:22.157833 env[1147]: 2023-10-02 19:01:22.101 [INFO][2567] ipam.go 489: Trying affinity for 192.168.61.64/26 host="10.0.0.82" Oct 2 19:01:22.157833 env[1147]: 2023-10-02 19:01:22.102 [INFO][2567] ipam.go 155: Attempting to load block cidr=192.168.61.64/26 host="10.0.0.82" Oct 2 19:01:22.157833 env[1147]: 2023-10-02 19:01:22.106 [INFO][2567] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.61.64/26 host="10.0.0.82" Oct 2 19:01:22.157833 env[1147]: 2023-10-02 19:01:22.106 [INFO][2567] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.61.64/26 handle="k8s-pod-network.77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a" host="10.0.0.82" Oct 2 19:01:22.157833 env[1147]: 2023-10-02 19:01:22.112 [INFO][2567] ipam.go 1682: Creating new handle: k8s-pod-network.77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a Oct 2 19:01:22.157833 env[1147]: 2023-10-02 19:01:22.121 [INFO][2567] ipam.go 1203: Writing block in order to claim IPs block=192.168.61.64/26 handle="k8s-pod-network.77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a" host="10.0.0.82" Oct 2 19:01:22.157833 env[1147]: 2023-10-02 19:01:22.131 [INFO][2567] ipam.go 1216: Successfully claimed IPs: [192.168.61.68/26] block=192.168.61.64/26 handle="k8s-pod-network.77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a" host="10.0.0.82" Oct 2 19:01:22.157833 env[1147]: 2023-10-02 19:01:22.131 [INFO][2567] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.61.68/26] handle="k8s-pod-network.77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a" host="10.0.0.82" Oct 2 19:01:22.157833 env[1147]: time="2023-10-02T19:01:22Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:01:22.157833 env[1147]: 2023-10-02 19:01:22.131 [INFO][2567] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.61.68/26] IPv6=[] ContainerID="77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a" HandleID="k8s-pod-network.77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a" Workload="10.0.0.82-k8s-calico--kube--controllers--69d9c784fb--zk68w-eth0" Oct 2 19:01:22.158356 env[1147]: 2023-10-02 19:01:22.133 [INFO][2536] k8s.go 383: Populated endpoint ContainerID="77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-zk68w" WorkloadEndpoint="10.0.0.82-k8s-calico--kube--controllers--69d9c784fb--zk68w-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82-k8s-calico--kube--controllers--69d9c784fb--zk68w-eth0", GenerateName:"calico-kube-controllers-69d9c784fb-", Namespace:"calico-system", SelfLink:"", UID:"e989a528-70bb-4f1d-99d6-ce3d072d1612", ResourceVersion:"965", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 0, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69d9c784fb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.82", ContainerID:"", Pod:"calico-kube-controllers-69d9c784fb-zk68w", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.61.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali27db373619e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:01:22.158356 env[1147]: 2023-10-02 19:01:22.134 [INFO][2536] k8s.go 384: Calico CNI using IPs: [192.168.61.68/32] ContainerID="77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-zk68w" WorkloadEndpoint="10.0.0.82-k8s-calico--kube--controllers--69d9c784fb--zk68w-eth0" Oct 2 19:01:22.158356 env[1147]: 2023-10-02 19:01:22.134 [INFO][2536] dataplane_linux.go 68: Setting the host side veth name to cali27db373619e ContainerID="77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-zk68w" WorkloadEndpoint="10.0.0.82-k8s-calico--kube--controllers--69d9c784fb--zk68w-eth0" Oct 2 19:01:22.158356 env[1147]: 2023-10-02 19:01:22.136 [INFO][2536] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-zk68w" WorkloadEndpoint="10.0.0.82-k8s-calico--kube--controllers--69d9c784fb--zk68w-eth0" Oct 2 19:01:22.158356 env[1147]: 2023-10-02 19:01:22.144 [INFO][2536] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-zk68w" WorkloadEndpoint="10.0.0.82-k8s-calico--kube--controllers--69d9c784fb--zk68w-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82-k8s-calico--kube--controllers--69d9c784fb--zk68w-eth0", GenerateName:"calico-kube-controllers-69d9c784fb-", Namespace:"calico-system", SelfLink:"", UID:"e989a528-70bb-4f1d-99d6-ce3d072d1612", ResourceVersion:"965", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 0, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69d9c784fb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.82", ContainerID:"77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a", Pod:"calico-kube-controllers-69d9c784fb-zk68w", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.61.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali27db373619e", MAC:"06:71:6c:58:5c:4b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:01:22.158356 env[1147]: 2023-10-02 19:01:22.155 [INFO][2536] k8s.go 489: Wrote updated endpoint to datastore ContainerID="77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-zk68w" WorkloadEndpoint="10.0.0.82-k8s-calico--kube--controllers--69d9c784fb--zk68w-eth0" Oct 2 19:01:22.172217 env[1147]: time="2023-10-02T19:01:22.172166435Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-565d847f94-4qmfj,Uid:0393487d-b389-48c4-bdba-e7cb93af3f9e,Namespace:kube-system,Attempt:0,} returns sandbox id \"f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8\"" Oct 2 19:01:22.173740 kubelet[1448]: E1002 19:01:22.173476 1448 dns.go:157] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:01:22.181564 env[1147]: time="2023-10-02T19:01:22.180477625Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:01:22.181564 env[1147]: time="2023-10-02T19:01:22.180542385Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:01:22.181564 env[1147]: time="2023-10-02T19:01:22.180554385Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:01:22.181564 env[1147]: time="2023-10-02T19:01:22.180731705Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a pid=2656 runtime=io.containerd.runc.v2 Oct 2 19:01:22.180000 audit[2661]: NETFILTER_CFG table=filter:84 family=2 entries=66 op=nft_register_chain pid=2661 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:01:22.180000 audit[2661]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=36140 a0=3 a1=ffffc5fe86a0 a2=0 a3=ffff9fa0afa0 items=0 ppid=2174 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:22.180000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:01:22.196313 systemd[1]: Started cri-containerd-77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a.scope. Oct 2 19:01:22.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.233000 audit: BPF prog-id=104 op=LOAD Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2656 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:22.234000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737623233343933356339333766383565646130613133396631333265 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2656 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:22.234000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737623233343933356339333766383565646130613133396631333265 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit: BPF prog-id=105 op=LOAD Oct 2 19:01:22.234000 audit[2667]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2656 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:22.234000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737623233343933356339333766383565646130613133396631333265 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit: BPF prog-id=106 op=LOAD Oct 2 19:01:22.234000 audit[2667]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2656 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:22.234000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737623233343933356339333766383565646130613133396631333265 Oct 2 19:01:22.234000 audit: BPF prog-id=106 op=UNLOAD Oct 2 19:01:22.234000 audit: BPF prog-id=105 op=UNLOAD Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.234000 audit: BPF prog-id=107 op=LOAD Oct 2 19:01:22.234000 audit[2667]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2656 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:22.234000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737623233343933356339333766383565646130613133396631333265 Oct 2 19:01:22.236493 systemd-resolved[1092]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 19:01:22.253680 env[1147]: time="2023-10-02T19:01:22.253615021Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69d9c784fb-zk68w,Uid:e989a528-70bb-4f1d-99d6-ce3d072d1612,Namespace:calico-system,Attempt:0,} returns sandbox id \"77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a\"" Oct 2 19:01:22.375827 kubelet[1448]: I1002 19:01:22.375721 1448 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:01:22.380528 systemd[1]: Created slice kubepods-besteffort-podf8e4d184_5cbe_46be_b91d_b16dd115329b.slice. Oct 2 19:01:22.498721 kubelet[1448]: I1002 19:01:22.495048 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7qm8k\" (UniqueName: \"kubernetes.io/projected/f8e4d184-5cbe-46be-b91d-b16dd115329b-kube-api-access-7qm8k\") pod \"nginx-deployment-5bbcdd876f-qgsbv\" (UID: \"f8e4d184-5cbe-46be-b91d-b16dd115329b\") " pod="default/nginx-deployment-5bbcdd876f-qgsbv" Oct 2 19:01:22.627832 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount746295822.mount: Deactivated successfully. Oct 2 19:01:22.689405 env[1147]: time="2023-10-02T19:01:22.689362077Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:nginx-deployment-5bbcdd876f-qgsbv,Uid:f8e4d184-5cbe-46be-b91d-b16dd115329b,Namespace:default,Attempt:0,}" Oct 2 19:01:22.785190 kubelet[1448]: E1002 19:01:22.785145 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:22.808764 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:01:22.808870 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8e3d2644377: link becomes ready Oct 2 19:01:22.816555 systemd-networkd[1050]: cali8e3d2644377: Link UP Oct 2 19:01:22.816562 systemd-networkd[1050]: cali8e3d2644377: Gained carrier Oct 2 19:01:22.827450 env[1147]: 2023-10-02 19:01:22.741 [INFO][2698] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {10.0.0.82-k8s-nginx--deployment--5bbcdd876f--qgsbv-eth0 nginx-deployment-5bbcdd876f- default f8e4d184-5cbe-46be-b91d-b16dd115329b 1004 0 2023-10-02 19:01:22 +0000 UTC map[app:nginx pod-template-hash:5bbcdd876f projectcalico.org/namespace:default projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s 10.0.0.82 nginx-deployment-5bbcdd876f-qgsbv eth0 default [] [] [kns.default ksa.default.default] cali8e3d2644377 [] []}} ContainerID="9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8" Namespace="default" Pod="nginx-deployment-5bbcdd876f-qgsbv" WorkloadEndpoint="10.0.0.82-k8s-nginx--deployment--5bbcdd876f--qgsbv-" Oct 2 19:01:22.827450 env[1147]: 2023-10-02 19:01:22.741 [INFO][2698] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8" Namespace="default" Pod="nginx-deployment-5bbcdd876f-qgsbv" WorkloadEndpoint="10.0.0.82-k8s-nginx--deployment--5bbcdd876f--qgsbv-eth0" Oct 2 19:01:22.827450 env[1147]: 2023-10-02 19:01:22.768 [INFO][2711] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8" HandleID="k8s-pod-network.9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8" Workload="10.0.0.82-k8s-nginx--deployment--5bbcdd876f--qgsbv-eth0" Oct 2 19:01:22.827450 env[1147]: 2023-10-02 19:01:22.781 [INFO][2711] ipam_plugin.go 269: Auto assigning IP ContainerID="9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8" HandleID="k8s-pod-network.9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8" Workload="10.0.0.82-k8s-nginx--deployment--5bbcdd876f--qgsbv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40000bb350), Attrs:map[string]string{"namespace":"default", "node":"10.0.0.82", "pod":"nginx-deployment-5bbcdd876f-qgsbv", "timestamp":"2023-10-02 19:01:22.768815345 +0000 UTC"}, Hostname:"10.0.0.82", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:01:22.827450 env[1147]: time="2023-10-02T19:01:22Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:01:22.827450 env[1147]: time="2023-10-02T19:01:22Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:01:22.827450 env[1147]: 2023-10-02 19:01:22.781 [INFO][2711] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host '10.0.0.82' Oct 2 19:01:22.827450 env[1147]: 2023-10-02 19:01:22.783 [INFO][2711] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8" host="10.0.0.82" Oct 2 19:01:22.827450 env[1147]: 2023-10-02 19:01:22.786 [INFO][2711] ipam.go 372: Looking up existing affinities for host host="10.0.0.82" Oct 2 19:01:22.827450 env[1147]: 2023-10-02 19:01:22.790 [INFO][2711] ipam.go 489: Trying affinity for 192.168.61.64/26 host="10.0.0.82" Oct 2 19:01:22.827450 env[1147]: 2023-10-02 19:01:22.791 [INFO][2711] ipam.go 155: Attempting to load block cidr=192.168.61.64/26 host="10.0.0.82" Oct 2 19:01:22.827450 env[1147]: 2023-10-02 19:01:22.793 [INFO][2711] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.61.64/26 host="10.0.0.82" Oct 2 19:01:22.827450 env[1147]: 2023-10-02 19:01:22.794 [INFO][2711] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.61.64/26 handle="k8s-pod-network.9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8" host="10.0.0.82" Oct 2 19:01:22.827450 env[1147]: 2023-10-02 19:01:22.795 [INFO][2711] ipam.go 1682: Creating new handle: k8s-pod-network.9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8 Oct 2 19:01:22.827450 env[1147]: 2023-10-02 19:01:22.799 [INFO][2711] ipam.go 1203: Writing block in order to claim IPs block=192.168.61.64/26 handle="k8s-pod-network.9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8" host="10.0.0.82" Oct 2 19:01:22.827450 env[1147]: 2023-10-02 19:01:22.804 [INFO][2711] ipam.go 1216: Successfully claimed IPs: [192.168.61.69/26] block=192.168.61.64/26 handle="k8s-pod-network.9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8" host="10.0.0.82" Oct 2 19:01:22.827450 env[1147]: 2023-10-02 19:01:22.804 [INFO][2711] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.61.69/26] handle="k8s-pod-network.9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8" host="10.0.0.82" Oct 2 19:01:22.827450 env[1147]: time="2023-10-02T19:01:22Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:01:22.827450 env[1147]: 2023-10-02 19:01:22.804 [INFO][2711] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.61.69/26] IPv6=[] ContainerID="9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8" HandleID="k8s-pod-network.9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8" Workload="10.0.0.82-k8s-nginx--deployment--5bbcdd876f--qgsbv-eth0" Oct 2 19:01:22.828176 env[1147]: 2023-10-02 19:01:22.805 [INFO][2698] k8s.go 383: Populated endpoint ContainerID="9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8" Namespace="default" Pod="nginx-deployment-5bbcdd876f-qgsbv" WorkloadEndpoint="10.0.0.82-k8s-nginx--deployment--5bbcdd876f--qgsbv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82-k8s-nginx--deployment--5bbcdd876f--qgsbv-eth0", GenerateName:"nginx-deployment-5bbcdd876f-", Namespace:"default", SelfLink:"", UID:"f8e4d184-5cbe-46be-b91d-b16dd115329b", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 1, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app":"nginx", "pod-template-hash":"5bbcdd876f", "projectcalico.org/namespace":"default", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.82", ContainerID:"", Pod:"nginx-deployment-5bbcdd876f-qgsbv", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.61.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.default", "ksa.default.default"}, InterfaceName:"cali8e3d2644377", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:01:22.828176 env[1147]: 2023-10-02 19:01:22.806 [INFO][2698] k8s.go 384: Calico CNI using IPs: [192.168.61.69/32] ContainerID="9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8" Namespace="default" Pod="nginx-deployment-5bbcdd876f-qgsbv" WorkloadEndpoint="10.0.0.82-k8s-nginx--deployment--5bbcdd876f--qgsbv-eth0" Oct 2 19:01:22.828176 env[1147]: 2023-10-02 19:01:22.806 [INFO][2698] dataplane_linux.go 68: Setting the host side veth name to cali8e3d2644377 ContainerID="9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8" Namespace="default" Pod="nginx-deployment-5bbcdd876f-qgsbv" WorkloadEndpoint="10.0.0.82-k8s-nginx--deployment--5bbcdd876f--qgsbv-eth0" Oct 2 19:01:22.828176 env[1147]: 2023-10-02 19:01:22.808 [INFO][2698] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8" Namespace="default" Pod="nginx-deployment-5bbcdd876f-qgsbv" WorkloadEndpoint="10.0.0.82-k8s-nginx--deployment--5bbcdd876f--qgsbv-eth0" Oct 2 19:01:22.828176 env[1147]: 2023-10-02 19:01:22.817 [INFO][2698] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8" Namespace="default" Pod="nginx-deployment-5bbcdd876f-qgsbv" WorkloadEndpoint="10.0.0.82-k8s-nginx--deployment--5bbcdd876f--qgsbv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82-k8s-nginx--deployment--5bbcdd876f--qgsbv-eth0", GenerateName:"nginx-deployment-5bbcdd876f-", Namespace:"default", SelfLink:"", UID:"f8e4d184-5cbe-46be-b91d-b16dd115329b", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 1, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app":"nginx", "pod-template-hash":"5bbcdd876f", "projectcalico.org/namespace":"default", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.82", ContainerID:"9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8", Pod:"nginx-deployment-5bbcdd876f-qgsbv", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.61.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.default", "ksa.default.default"}, InterfaceName:"cali8e3d2644377", MAC:"96:10:78:90:b1:17", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:01:22.828176 env[1147]: 2023-10-02 19:01:22.822 [INFO][2698] k8s.go 489: Wrote updated endpoint to datastore ContainerID="9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8" Namespace="default" Pod="nginx-deployment-5bbcdd876f-qgsbv" WorkloadEndpoint="10.0.0.82-k8s-nginx--deployment--5bbcdd876f--qgsbv-eth0" Oct 2 19:01:22.837735 systemd-networkd[1050]: calidbe612d3769: Gained IPv6LL Oct 2 19:01:22.841000 audit[2734]: NETFILTER_CFG table=filter:85 family=2 entries=48 op=nft_register_chain pid=2734 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:01:22.841000 audit[2734]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23424 a0=3 a1=ffffe8f99140 a2=0 a3=ffff910f6fa0 items=0 ppid=2174 pid=2734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:22.841000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:01:22.845767 env[1147]: time="2023-10-02T19:01:22.845703656Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:01:22.845853 env[1147]: time="2023-10-02T19:01:22.845780776Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:01:22.845853 env[1147]: time="2023-10-02T19:01:22.845809136Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:01:22.846048 env[1147]: time="2023-10-02T19:01:22.845993496Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8 pid=2741 runtime=io.containerd.runc.v2 Oct 2 19:01:22.858106 systemd[1]: Started cri-containerd-9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8.scope. Oct 2 19:01:22.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit: BPF prog-id=108 op=LOAD Oct 2 19:01:22.879000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[2752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bfb38 a2=10 a3=0 items=0 ppid=2741 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:22.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937303330343637323262643362346362326430353031363439333535 Oct 2 19:01:22.879000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[2752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bf5a0 a2=3c a3=0 items=0 ppid=2741 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:22.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937303330343637323262643362346362326430353031363439333535 Oct 2 19:01:22.879000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit: BPF prog-id=109 op=LOAD Oct 2 19:01:22.879000 audit[2752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bf8e0 a2=78 a3=0 items=0 ppid=2741 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:22.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937303330343637323262643362346362326430353031363439333535 Oct 2 19:01:22.879000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.879000 audit: BPF prog-id=110 op=LOAD Oct 2 19:01:22.879000 audit[2752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bf670 a2=78 a3=0 items=0 ppid=2741 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:22.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937303330343637323262643362346362326430353031363439333535 Oct 2 19:01:22.880000 audit: BPF prog-id=110 op=UNLOAD Oct 2 19:01:22.880000 audit: BPF prog-id=109 op=UNLOAD Oct 2 19:01:22.880000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.880000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.880000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.880000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.880000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.880000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.880000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.880000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.880000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.880000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:22.880000 audit: BPF prog-id=111 op=LOAD Oct 2 19:01:22.880000 audit[2752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bfb40 a2=78 a3=0 items=0 ppid=2741 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:22.880000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937303330343637323262643362346362326430353031363439333535 Oct 2 19:01:22.883484 systemd-resolved[1092]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 19:01:22.901611 env[1147]: time="2023-10-02T19:01:22.901557512Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:nginx-deployment-5bbcdd876f-qgsbv,Uid:f8e4d184-5cbe-46be-b91d-b16dd115329b,Namespace:default,Attempt:0,} returns sandbox id \"9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8\"" Oct 2 19:01:23.094229 systemd-networkd[1050]: calia1a58909a01: Gained IPv6LL Oct 2 19:01:23.138950 env[1147]: time="2023-10-02T19:01:23.138736248Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:23.142700 env[1147]: time="2023-10-02T19:01:23.142656163Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:23.144347 env[1147]: time="2023-10-02T19:01:23.144307882Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:23.147339 env[1147]: time="2023-10-02T19:01:23.147298238Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:23.148023 env[1147]: time="2023-10-02T19:01:23.147988358Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\"" Oct 2 19:01:23.149620 env[1147]: time="2023-10-02T19:01:23.149590436Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:01:23.150894 env[1147]: time="2023-10-02T19:01:23.150858075Z" level=info msg="CreateContainer within sandbox \"70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 2 19:01:23.175073 env[1147]: time="2023-10-02T19:01:23.175021928Z" level=info msg="CreateContainer within sandbox \"70657604f8efa37061f442ccd47d932da9b535a3a075c5cbf9778e44a5c6dfc7\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"852c73c2ab2627520da76109417b3fef42e118240f3b053367cd75b95d969a35\"" Oct 2 19:01:23.175916 env[1147]: time="2023-10-02T19:01:23.175883527Z" level=info msg="StartContainer for \"852c73c2ab2627520da76109417b3fef42e118240f3b053367cd75b95d969a35\"" Oct 2 19:01:23.205857 systemd[1]: Started cri-containerd-852c73c2ab2627520da76109417b3fef42e118240f3b053367cd75b95d969a35.scope. Oct 2 19:01:23.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.226000 audit: BPF prog-id=112 op=LOAD Oct 2 19:01:23.226000 audit[2784]: AVC avc: denied { bpf } for pid=2784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.226000 audit[2784]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bfb38 a2=10 a3=0 items=0 ppid=2442 pid=2784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:23.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835326337336332616232363237353230646137363130393431376233 Oct 2 19:01:23.226000 audit[2784]: AVC avc: denied { perfmon } for pid=2784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.226000 audit[2784]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bf5a0 a2=3c a3=0 items=0 ppid=2442 pid=2784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:23.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835326337336332616232363237353230646137363130393431376233 Oct 2 19:01:23.226000 audit[2784]: AVC avc: denied { bpf } for pid=2784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.226000 audit[2784]: AVC avc: denied { bpf } for pid=2784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.226000 audit[2784]: AVC avc: denied { bpf } for pid=2784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.226000 audit[2784]: AVC avc: denied { perfmon } for pid=2784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.226000 audit[2784]: AVC avc: denied { perfmon } for pid=2784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.226000 audit[2784]: AVC avc: denied { perfmon } for pid=2784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.226000 audit[2784]: AVC avc: denied { perfmon } for pid=2784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.226000 audit[2784]: AVC avc: denied { perfmon } for pid=2784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.226000 audit[2784]: AVC avc: denied { bpf } for pid=2784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.226000 audit[2784]: AVC avc: denied { bpf } for pid=2784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.226000 audit: BPF prog-id=113 op=LOAD Oct 2 19:01:23.226000 audit[2784]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bf8e0 a2=78 a3=0 items=0 ppid=2442 pid=2784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:23.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835326337336332616232363237353230646137363130393431376233 Oct 2 19:01:23.227000 audit[2784]: AVC avc: denied { bpf } for pid=2784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.227000 audit[2784]: AVC avc: denied { bpf } for pid=2784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.227000 audit[2784]: AVC avc: denied { perfmon } for pid=2784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.227000 audit[2784]: AVC avc: denied { perfmon } for pid=2784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.227000 audit[2784]: AVC avc: denied { perfmon } for pid=2784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.227000 audit[2784]: AVC avc: denied { perfmon } for pid=2784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.227000 audit[2784]: AVC avc: denied { perfmon } for pid=2784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.227000 audit[2784]: AVC avc: denied { bpf } for pid=2784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.227000 audit[2784]: AVC avc: denied { bpf } for pid=2784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.227000 audit: BPF prog-id=114 op=LOAD Oct 2 19:01:23.227000 audit[2784]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bf670 a2=78 a3=0 items=0 ppid=2442 pid=2784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:23.227000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835326337336332616232363237353230646137363130393431376233 Oct 2 19:01:23.227000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:01:23.227000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:01:23.227000 audit[2784]: AVC avc: denied { bpf } for pid=2784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.227000 audit[2784]: AVC avc: denied { bpf } for pid=2784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.227000 audit[2784]: AVC avc: denied { bpf } for pid=2784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.227000 audit[2784]: AVC avc: denied { perfmon } for pid=2784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.227000 audit[2784]: AVC avc: denied { perfmon } for pid=2784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.227000 audit[2784]: AVC avc: denied { perfmon } for pid=2784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.227000 audit[2784]: AVC avc: denied { perfmon } for pid=2784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.227000 audit[2784]: AVC avc: denied { perfmon } for pid=2784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.227000 audit[2784]: AVC avc: denied { bpf } for pid=2784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.227000 audit[2784]: AVC avc: denied { bpf } for pid=2784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.227000 audit: BPF prog-id=115 op=LOAD Oct 2 19:01:23.227000 audit[2784]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bfb40 a2=78 a3=0 items=0 ppid=2442 pid=2784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:23.227000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835326337336332616232363237353230646137363130393431376233 Oct 2 19:01:23.245310 env[1147]: time="2023-10-02T19:01:23.245265772Z" level=info msg="StartContainer for \"852c73c2ab2627520da76109417b3fef42e118240f3b053367cd75b95d969a35\" returns successfully" Oct 2 19:01:23.310368 env[1147]: time="2023-10-02T19:01:23.310237902Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:01:23.311112 env[1147]: time="2023-10-02T19:01:23.311074981Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:01:23.311378 kubelet[1448]: E1002 19:01:23.311346 1448 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:01:23.311430 kubelet[1448]: E1002 19:01:23.311393 1448 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:01:23.311634 kubelet[1448]: E1002 19:01:23.311598 1448 kuberuntime_manager.go:862] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-22ltk,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-5rj8j_calico-system(d89d6de6-088e-4d24-918a-66a4080967e8): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:01:23.311942 env[1147]: time="2023-10-02T19:01:23.311911900Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 19:01:23.377545 env[1147]: time="2023-10-02T19:01:23.377464389Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:23.378951 env[1147]: time="2023-10-02T19:01:23.378922587Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:23.380572 env[1147]: time="2023-10-02T19:01:23.380545346Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:23.382146 env[1147]: time="2023-10-02T19:01:23.382109344Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:23.382892 env[1147]: time="2023-10-02T19:01:23.382862543Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\"" Oct 2 19:01:23.383361 env[1147]: time="2023-10-02T19:01:23.383335423Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\"" Oct 2 19:01:23.386802 env[1147]: time="2023-10-02T19:01:23.386757779Z" level=info msg="CreateContainer within sandbox \"f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 2 19:01:23.398690 env[1147]: time="2023-10-02T19:01:23.396063809Z" level=info msg="CreateContainer within sandbox \"f17543b52d114aaab101da2b953bb0b1e572710eca05f2f823438bf342e7c5d8\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"f23515ac9b24edba7be43d49f411d5e919846d055eb1179155a9c75a2ef52279\"" Oct 2 19:01:23.399169 env[1147]: time="2023-10-02T19:01:23.399114205Z" level=info msg="StartContainer for \"f23515ac9b24edba7be43d49f411d5e919846d055eb1179155a9c75a2ef52279\"" Oct 2 19:01:23.414998 systemd[1]: Started cri-containerd-f23515ac9b24edba7be43d49f411d5e919846d055eb1179155a9c75a2ef52279.scope. Oct 2 19:01:23.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.435000 audit: BPF prog-id=116 op=LOAD Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2600 pid=2827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:23.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632333531356163396232346564626137626534336434396634313164 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2600 pid=2827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:23.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632333531356163396232346564626137626534336434396634313164 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit: BPF prog-id=117 op=LOAD Oct 2 19:01:23.436000 audit[2827]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2600 pid=2827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:23.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632333531356163396232346564626137626534336434396634313164 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit: BPF prog-id=118 op=LOAD Oct 2 19:01:23.436000 audit[2827]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2600 pid=2827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:23.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632333531356163396232346564626137626534336434396634313164 Oct 2 19:01:23.436000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:01:23.436000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:23.436000 audit: BPF prog-id=119 op=LOAD Oct 2 19:01:23.436000 audit[2827]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2600 pid=2827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:23.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632333531356163396232346564626137626534336434396634313164 Oct 2 19:01:23.455079 env[1147]: time="2023-10-02T19:01:23.454890545Z" level=info msg="StartContainer for \"f23515ac9b24edba7be43d49f411d5e919846d055eb1179155a9c75a2ef52279\" returns successfully" Oct 2 19:01:23.605746 systemd-networkd[1050]: cali27db373619e: Gained IPv6LL Oct 2 19:01:23.785863 kubelet[1448]: E1002 19:01:23.785754 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:23.925723 systemd-networkd[1050]: vxlan.calico: Gained IPv6LL Oct 2 19:01:24.056608 kubelet[1448]: E1002 19:01:24.056422 1448 dns.go:157] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:01:24.057493 kubelet[1448]: E1002 19:01:24.057456 1448 dns.go:157] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:01:24.114000 audit[2887]: NETFILTER_CFG table=filter:86 family=2 entries=12 op=nft_register_rule pid=2887 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:01:24.114000 audit[2887]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4028 a0=3 a1=ffffd3641ad0 a2=0 a3=ffff80c8d6c0 items=0 ppid=1695 pid=2887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:24.114000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:01:24.118606 systemd-networkd[1050]: caliaf0669711f5: Gained IPv6LL Oct 2 19:01:24.115000 audit[2887]: NETFILTER_CFG table=nat:87 family=2 entries=30 op=nft_register_rule pid=2887 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:01:24.115000 audit[2887]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8836 a0=3 a1=ffffd3641ad0 a2=0 a3=ffff80c8d6c0 items=0 ppid=1695 pid=2887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:24.115000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:01:24.158000 audit[2913]: NETFILTER_CFG table=filter:88 family=2 entries=9 op=nft_register_rule pid=2913 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:01:24.158000 audit[2913]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=fffff6e8cf00 a2=0 a3=ffff92a256c0 items=0 ppid=1695 pid=2913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:24.158000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:01:24.159000 audit[2913]: NETFILTER_CFG table=nat:89 family=2 entries=51 op=nft_register_chain pid=2913 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:01:24.159000 audit[2913]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19324 a0=3 a1=fffff6e8cf00 a2=0 a3=ffff92a256c0 items=0 ppid=1695 pid=2913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:24.159000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:01:24.565665 systemd-networkd[1050]: cali8e3d2644377: Gained IPv6LL Oct 2 19:01:24.786327 kubelet[1448]: E1002 19:01:24.786278 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:25.059709 kubelet[1448]: E1002 19:01:25.059593 1448 dns.go:157] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:01:25.059830 kubelet[1448]: E1002 19:01:25.059786 1448 dns.go:157] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:01:25.217000 audit[2943]: NETFILTER_CFG table=filter:90 family=2 entries=6 op=nft_register_rule pid=2943 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:01:25.217000 audit[2943]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=fffffe475550 a2=0 a3=ffff969816c0 items=0 ppid=1695 pid=2943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:25.217000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:01:25.226000 audit[2943]: NETFILTER_CFG table=nat:91 family=2 entries=72 op=nft_register_chain pid=2943 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:01:25.226000 audit[2943]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24988 a0=3 a1=fffffe475550 a2=0 a3=ffff969816c0 items=0 ppid=1695 pid=2943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:25.226000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:01:25.529684 env[1147]: time="2023-10-02T19:01:25.529572353Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:25.531469 env[1147]: time="2023-10-02T19:01:25.531438632Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2a83e28de36778d89892266990cc390b1519b82e6d9724ca705c0d1e700b5804,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:25.534320 env[1147]: time="2023-10-02T19:01:25.534281269Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:25.535400 env[1147]: time="2023-10-02T19:01:25.535361348Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:b764feb1777655aabce5988324b69b412d23e087436ee2414dff893a158fcdef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:25.538102 env[1147]: time="2023-10-02T19:01:25.538068825Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\" returns image reference \"sha256:2a83e28de36778d89892266990cc390b1519b82e6d9724ca705c0d1e700b5804\"" Oct 2 19:01:25.539040 env[1147]: time="2023-10-02T19:01:25.538948665Z" level=info msg="PullImage \"ghcr.io/flatcar/nginx:latest\"" Oct 2 19:01:25.547306 env[1147]: time="2023-10-02T19:01:25.547269737Z" level=info msg="CreateContainer within sandbox \"77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Oct 2 19:01:25.556630 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1431047655.mount: Deactivated successfully. Oct 2 19:01:25.567585 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount254379248.mount: Deactivated successfully. Oct 2 19:01:25.572359 env[1147]: time="2023-10-02T19:01:25.572305873Z" level=info msg="CreateContainer within sandbox \"77b234935c937f85eda0a139f132ec65511f036c76b2cf4d28fe98923e5cce3a\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"cba35a207cebe1158a78314c212b0d7ce97ae4ee83340af6a31a2c0ee016aaf2\"" Oct 2 19:01:25.575008 env[1147]: time="2023-10-02T19:01:25.572932392Z" level=info msg="StartContainer for \"cba35a207cebe1158a78314c212b0d7ce97ae4ee83340af6a31a2c0ee016aaf2\"" Oct 2 19:01:25.600537 systemd[1]: Started cri-containerd-cba35a207cebe1158a78314c212b0d7ce97ae4ee83340af6a31a2c0ee016aaf2.scope. Oct 2 19:01:25.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.626000 audit: BPF prog-id=120 op=LOAD Oct 2 19:01:25.630000 audit[2959]: AVC avc: denied { bpf } for pid=2959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.630000 audit[2959]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2656 pid=2959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:25.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362613335613230376365626531313538613738333134633231326230 Oct 2 19:01:25.630000 audit[2959]: AVC avc: denied { perfmon } for pid=2959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.630000 audit[2959]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2656 pid=2959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:25.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362613335613230376365626531313538613738333134633231326230 Oct 2 19:01:25.630000 audit[2959]: AVC avc: denied { bpf } for pid=2959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.630000 audit[2959]: AVC avc: denied { bpf } for pid=2959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.630000 audit[2959]: AVC avc: denied { bpf } for pid=2959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.630000 audit[2959]: AVC avc: denied { perfmon } for pid=2959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.630000 audit[2959]: AVC avc: denied { perfmon } for pid=2959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.630000 audit[2959]: AVC avc: denied { perfmon } for pid=2959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.630000 audit[2959]: AVC avc: denied { perfmon } for pid=2959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.630000 audit[2959]: AVC avc: denied { perfmon } for pid=2959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.630000 audit[2959]: AVC avc: denied { bpf } for pid=2959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.630000 audit[2959]: AVC avc: denied { bpf } for pid=2959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.630000 audit: BPF prog-id=121 op=LOAD Oct 2 19:01:25.630000 audit[2959]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2656 pid=2959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:25.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362613335613230376365626531313538613738333134633231326230 Oct 2 19:01:25.631000 audit[2959]: AVC avc: denied { bpf } for pid=2959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.631000 audit[2959]: AVC avc: denied { bpf } for pid=2959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.631000 audit[2959]: AVC avc: denied { perfmon } for pid=2959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.631000 audit[2959]: AVC avc: denied { perfmon } for pid=2959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.631000 audit[2959]: AVC avc: denied { perfmon } for pid=2959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.631000 audit[2959]: AVC avc: denied { perfmon } for pid=2959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.631000 audit[2959]: AVC avc: denied { perfmon } for pid=2959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.631000 audit[2959]: AVC avc: denied { bpf } for pid=2959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.631000 audit[2959]: AVC avc: denied { bpf } for pid=2959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.631000 audit: BPF prog-id=122 op=LOAD Oct 2 19:01:25.631000 audit[2959]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2656 pid=2959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:25.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362613335613230376365626531313538613738333134633231326230 Oct 2 19:01:25.631000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:01:25.631000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:01:25.631000 audit[2959]: AVC avc: denied { bpf } for pid=2959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.631000 audit[2959]: AVC avc: denied { bpf } for pid=2959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.631000 audit[2959]: AVC avc: denied { bpf } for pid=2959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.631000 audit[2959]: AVC avc: denied { perfmon } for pid=2959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.631000 audit[2959]: AVC avc: denied { perfmon } for pid=2959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.631000 audit[2959]: AVC avc: denied { perfmon } for pid=2959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.631000 audit[2959]: AVC avc: denied { perfmon } for pid=2959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.631000 audit[2959]: AVC avc: denied { perfmon } for pid=2959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.631000 audit[2959]: AVC avc: denied { bpf } for pid=2959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.631000 audit[2959]: AVC avc: denied { bpf } for pid=2959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:25.631000 audit: BPF prog-id=123 op=LOAD Oct 2 19:01:25.631000 audit[2959]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2656 pid=2959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:25.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362613335613230376365626531313538613738333134633231326230 Oct 2 19:01:25.653104 env[1147]: time="2023-10-02T19:01:25.653059756Z" level=info msg="StartContainer for \"cba35a207cebe1158a78314c212b0d7ce97ae4ee83340af6a31a2c0ee016aaf2\" returns successfully" Oct 2 19:01:25.787146 kubelet[1448]: E1002 19:01:25.787016 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:26.062547 kubelet[1448]: E1002 19:01:26.062426 1448 dns.go:157] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:01:26.505350 update_engine[1139]: I1002 19:01:26.504629 1139 update_attempter.cc:505] Updating boot flags... Oct 2 19:01:26.788126 kubelet[1448]: E1002 19:01:26.788011 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:27.082842 kubelet[1448]: E1002 19:01:27.082750 1448 dns.go:157] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:01:27.738070 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4046112270.mount: Deactivated successfully. Oct 2 19:01:27.760089 kubelet[1448]: E1002 19:01:27.760048 1448 file.go:104] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:27.788345 kubelet[1448]: E1002 19:01:27.788305 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:28.677620 env[1147]: time="2023-10-02T19:01:28.677562763Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/nginx:latest,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:28.680535 env[1147]: time="2023-10-02T19:01:28.680472041Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7a57d753be2d9e69d7787326e21137e5f57448955d7294cea9891e593fc97821,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:28.683325 env[1147]: time="2023-10-02T19:01:28.683290559Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/nginx:latest,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:28.684755 env[1147]: time="2023-10-02T19:01:28.684729357Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/nginx@sha256:637f6b877b0a51c456b44ec74046864b5131a87cb1c4536f11170201073027cf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:28.685433 env[1147]: time="2023-10-02T19:01:28.685408957Z" level=info msg="PullImage \"ghcr.io/flatcar/nginx:latest\" returns image reference \"sha256:7a57d753be2d9e69d7787326e21137e5f57448955d7294cea9891e593fc97821\"" Oct 2 19:01:28.686257 env[1147]: time="2023-10-02T19:01:28.686231836Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:01:28.686960 env[1147]: time="2023-10-02T19:01:28.686925716Z" level=info msg="CreateContainer within sandbox \"9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8\" for container &ContainerMetadata{Name:nginx,Attempt:0,}" Oct 2 19:01:28.703982 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2962406892.mount: Deactivated successfully. Oct 2 19:01:28.708710 env[1147]: time="2023-10-02T19:01:28.708656339Z" level=info msg="CreateContainer within sandbox \"9703046722bd3b4cb2d0501649355cd17c2df27e76ebb5d6aacbae5ada6682a8\" for &ContainerMetadata{Name:nginx,Attempt:0,} returns container id \"66bb842ccb522e32c92785531eb937f3af1c905a398062af201b2d5031d17e74\"" Oct 2 19:01:28.709340 env[1147]: time="2023-10-02T19:01:28.709306778Z" level=info msg="StartContainer for \"66bb842ccb522e32c92785531eb937f3af1c905a398062af201b2d5031d17e74\"" Oct 2 19:01:28.726645 systemd[1]: Started cri-containerd-66bb842ccb522e32c92785531eb937f3af1c905a398062af201b2d5031d17e74.scope. Oct 2 19:01:28.738081 systemd[1]: run-containerd-runc-k8s.io-66bb842ccb522e32c92785531eb937f3af1c905a398062af201b2d5031d17e74-runc.fcN3ji.mount: Deactivated successfully. Oct 2 19:01:28.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.774708 kernel: kauditd_printk_skb: 569 callbacks suppressed Oct 2 19:01:28.774793 kernel: audit: type=1400 audit(1696273288.770:878): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.774827 kernel: audit: type=1400 audit(1696273288.770:879): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.779429 kernel: audit: type=1400 audit(1696273288.770:880): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.779472 kernel: audit: type=1400 audit(1696273288.770:881): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.784344 kernel: audit: type=1400 audit(1696273288.770:882): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.784423 kernel: audit: type=1400 audit(1696273288.770:883): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.788667 kubelet[1448]: E1002 19:01:28.788614 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:28.789236 kernel: audit: type=1400 audit(1696273288.770:884): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.792243 kernel: audit: type=1400 audit(1696273288.770:885): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.794914 kernel: audit: type=1400 audit(1696273288.770:886): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.797567 kernel: audit: type=1400 audit(1696273288.770:887): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.770000 audit: BPF prog-id=124 op=LOAD Oct 2 19:01:28.771000 audit[3050]: AVC avc: denied { bpf } for pid=3050 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.771000 audit[3050]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2741 pid=3050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:28.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636626238343263636235323265333263393237383535333165623933 Oct 2 19:01:28.771000 audit[3050]: AVC avc: denied { perfmon } for pid=3050 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.771000 audit[3050]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2741 pid=3050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:28.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636626238343263636235323265333263393237383535333165623933 Oct 2 19:01:28.771000 audit[3050]: AVC avc: denied { bpf } for pid=3050 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.771000 audit[3050]: AVC avc: denied { bpf } for pid=3050 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.771000 audit[3050]: AVC avc: denied { bpf } for pid=3050 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.771000 audit[3050]: AVC avc: denied { perfmon } for pid=3050 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.771000 audit[3050]: AVC avc: denied { perfmon } for pid=3050 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.771000 audit[3050]: AVC avc: denied { perfmon } for pid=3050 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.771000 audit[3050]: AVC avc: denied { perfmon } for pid=3050 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.771000 audit[3050]: AVC avc: denied { perfmon } for pid=3050 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.771000 audit[3050]: AVC avc: denied { bpf } for pid=3050 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.771000 audit[3050]: AVC avc: denied { bpf } for pid=3050 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.771000 audit: BPF prog-id=125 op=LOAD Oct 2 19:01:28.771000 audit[3050]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2741 pid=3050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:28.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636626238343263636235323265333263393237383535333165623933 Oct 2 19:01:28.773000 audit[3050]: AVC avc: denied { bpf } for pid=3050 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.773000 audit[3050]: AVC avc: denied { bpf } for pid=3050 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.773000 audit[3050]: AVC avc: denied { perfmon } for pid=3050 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.773000 audit[3050]: AVC avc: denied { perfmon } for pid=3050 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.773000 audit[3050]: AVC avc: denied { perfmon } for pid=3050 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.773000 audit[3050]: AVC avc: denied { perfmon } for pid=3050 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.773000 audit[3050]: AVC avc: denied { perfmon } for pid=3050 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.773000 audit[3050]: AVC avc: denied { bpf } for pid=3050 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.773000 audit[3050]: AVC avc: denied { bpf } for pid=3050 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.773000 audit: BPF prog-id=126 op=LOAD Oct 2 19:01:28.773000 audit[3050]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2741 pid=3050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:28.773000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636626238343263636235323265333263393237383535333165623933 Oct 2 19:01:28.775000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:01:28.775000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:01:28.775000 audit[3050]: AVC avc: denied { bpf } for pid=3050 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.775000 audit[3050]: AVC avc: denied { bpf } for pid=3050 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.775000 audit[3050]: AVC avc: denied { bpf } for pid=3050 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.775000 audit[3050]: AVC avc: denied { perfmon } for pid=3050 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.775000 audit[3050]: AVC avc: denied { perfmon } for pid=3050 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.775000 audit[3050]: AVC avc: denied { perfmon } for pid=3050 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.775000 audit[3050]: AVC avc: denied { perfmon } for pid=3050 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.775000 audit[3050]: AVC avc: denied { perfmon } for pid=3050 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.775000 audit[3050]: AVC avc: denied { bpf } for pid=3050 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.775000 audit[3050]: AVC avc: denied { bpf } for pid=3050 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:28.775000 audit: BPF prog-id=127 op=LOAD Oct 2 19:01:28.775000 audit[3050]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2741 pid=3050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:28.775000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636626238343263636235323265333263393237383535333165623933 Oct 2 19:01:28.805230 env[1147]: time="2023-10-02T19:01:28.805191023Z" level=info msg="StartContainer for \"66bb842ccb522e32c92785531eb937f3af1c905a398062af201b2d5031d17e74\" returns successfully" Oct 2 19:01:28.849228 env[1147]: time="2023-10-02T19:01:28.849159068Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:01:28.849900 env[1147]: time="2023-10-02T19:01:28.849865188Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:01:28.850114 kubelet[1448]: E1002 19:01:28.850094 1448 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:01:28.850220 kubelet[1448]: E1002 19:01:28.850137 1448 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:01:28.850277 kubelet[1448]: E1002 19:01:28.850256 1448 kuberuntime_manager.go:862] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-22ltk,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-5rj8j_calico-system(d89d6de6-088e-4d24-918a-66a4080967e8): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:01:28.850375 kubelet[1448]: E1002 19:01:28.850312 1448 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-5rj8j" podUID=d89d6de6-088e-4d24-918a-66a4080967e8 Oct 2 19:01:29.070548 kubelet[1448]: E1002 19:01:29.070425 1448 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-5rj8j" podUID=d89d6de6-088e-4d24-918a-66a4080967e8 Oct 2 19:01:29.789237 kubelet[1448]: E1002 19:01:29.789168 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:30.789780 kubelet[1448]: E1002 19:01:30.789655 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:31.790638 kubelet[1448]: E1002 19:01:31.790589 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:32.021242 kubelet[1448]: I1002 19:01:32.021169 1448 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:01:32.024875 kubelet[1448]: I1002 19:01:32.024833 1448 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:01:32.030625 systemd[1]: Created slice kubepods-besteffort-podd28490e8_da57_4720_a4c4_44234134b70b.slice. Oct 2 19:01:32.037915 systemd[1]: Created slice kubepods-besteffort-pod06b26f07_4b69_45b9_9e96_7d21f0c6d792.slice. Oct 2 19:01:32.080000 audit[3154]: NETFILTER_CFG table=filter:92 family=2 entries=7 op=nft_register_rule pid=3154 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:01:32.080000 audit[3154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2620 a0=3 a1=fffff83b0840 a2=0 a3=ffffb3b5b6c0 items=0 ppid=1695 pid=3154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:32.080000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:01:32.083000 audit[3154]: NETFILTER_CFG table=nat:93 family=2 entries=78 op=nft_register_rule pid=3154 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:01:32.083000 audit[3154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24988 a0=3 a1=fffff83b0840 a2=0 a3=ffffb3b5b6c0 items=0 ppid=1695 pid=3154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:32.083000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:01:32.127000 audit[3180]: NETFILTER_CFG table=filter:94 family=2 entries=8 op=nft_register_rule pid=3180 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:01:32.127000 audit[3180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2620 a0=3 a1=ffffd6126240 a2=0 a3=ffffbc4086c0 items=0 ppid=1695 pid=3180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:32.127000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:01:32.129000 audit[3180]: NETFILTER_CFG table=nat:95 family=2 entries=78 op=nft_register_rule pid=3180 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:01:32.129000 audit[3180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24988 a0=3 a1=ffffd6126240 a2=0 a3=ffffbc4086c0 items=0 ppid=1695 pid=3180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:32.129000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:01:32.156768 kubelet[1448]: I1002 19:01:32.156703 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-m26zp\" (UniqueName: \"kubernetes.io/projected/06b26f07-4b69-45b9-9e96-7d21f0c6d792-kube-api-access-m26zp\") pod \"calico-apiserver-7b5f4848fc-6zp44\" (UID: \"06b26f07-4b69-45b9-9e96-7d21f0c6d792\") " pod="calico-apiserver/calico-apiserver-7b5f4848fc-6zp44" Oct 2 19:01:32.156768 kubelet[1448]: I1002 19:01:32.156754 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/06b26f07-4b69-45b9-9e96-7d21f0c6d792-calico-apiserver-certs\") pod \"calico-apiserver-7b5f4848fc-6zp44\" (UID: \"06b26f07-4b69-45b9-9e96-7d21f0c6d792\") " pod="calico-apiserver/calico-apiserver-7b5f4848fc-6zp44" Oct 2 19:01:32.156962 kubelet[1448]: I1002 19:01:32.156835 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/d28490e8-da57-4720-a4c4-44234134b70b-calico-apiserver-certs\") pod \"calico-apiserver-7b5f4848fc-fzlhc\" (UID: \"d28490e8-da57-4720-a4c4-44234134b70b\") " pod="calico-apiserver/calico-apiserver-7b5f4848fc-fzlhc" Oct 2 19:01:32.156962 kubelet[1448]: I1002 19:01:32.156874 1448 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6sgs5\" (UniqueName: \"kubernetes.io/projected/d28490e8-da57-4720-a4c4-44234134b70b-kube-api-access-6sgs5\") pod \"calico-apiserver-7b5f4848fc-fzlhc\" (UID: \"d28490e8-da57-4720-a4c4-44234134b70b\") " pod="calico-apiserver/calico-apiserver-7b5f4848fc-fzlhc" Oct 2 19:01:32.336323 env[1147]: time="2023-10-02T19:01:32.335909114Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7b5f4848fc-fzlhc,Uid:d28490e8-da57-4720-a4c4-44234134b70b,Namespace:calico-apiserver,Attempt:0,}" Oct 2 19:01:32.342051 env[1147]: time="2023-10-02T19:01:32.341911510Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7b5f4848fc-6zp44,Uid:06b26f07-4b69-45b9-9e96-7d21f0c6d792,Namespace:calico-apiserver,Attempt:0,}" Oct 2 19:01:32.524579 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:01:32.526470 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliaf02c1ad0d7: link becomes ready Oct 2 19:01:32.543527 systemd-networkd[1050]: caliaf02c1ad0d7: Link UP Oct 2 19:01:32.543533 systemd-networkd[1050]: caliaf02c1ad0d7: Gained carrier Oct 2 19:01:32.568640 env[1147]: 2023-10-02 19:01:32.422 [INFO][3196] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {10.0.0.82-k8s-calico--apiserver--7b5f4848fc--6zp44-eth0 calico-apiserver-7b5f4848fc- calico-apiserver 06b26f07-4b69-45b9-9e96-7d21f0c6d792 1135 0 2023-10-02 19:01:32 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7b5f4848fc projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s 10.0.0.82 calico-apiserver-7b5f4848fc-6zp44 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] caliaf02c1ad0d7 [] []}} ContainerID="9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160" Namespace="calico-apiserver" Pod="calico-apiserver-7b5f4848fc-6zp44" WorkloadEndpoint="10.0.0.82-k8s-calico--apiserver--7b5f4848fc--6zp44-" Oct 2 19:01:32.568640 env[1147]: 2023-10-02 19:01:32.423 [INFO][3196] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160" Namespace="calico-apiserver" Pod="calico-apiserver-7b5f4848fc-6zp44" WorkloadEndpoint="10.0.0.82-k8s-calico--apiserver--7b5f4848fc--6zp44-eth0" Oct 2 19:01:32.568640 env[1147]: 2023-10-02 19:01:32.460 [INFO][3210] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160" HandleID="k8s-pod-network.9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160" Workload="10.0.0.82-k8s-calico--apiserver--7b5f4848fc--6zp44-eth0" Oct 2 19:01:32.568640 env[1147]: 2023-10-02 19:01:32.473 [INFO][3210] ipam_plugin.go 269: Auto assigning IP ContainerID="9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160" HandleID="k8s-pod-network.9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160" Workload="10.0.0.82-k8s-calico--apiserver--7b5f4848fc--6zp44-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40004b9180), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"10.0.0.82", "pod":"calico-apiserver-7b5f4848fc-6zp44", "timestamp":"2023-10-02 19:01:32.460028518 +0000 UTC"}, Hostname:"10.0.0.82", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:01:32.568640 env[1147]: time="2023-10-02T19:01:32Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:01:32.568640 env[1147]: time="2023-10-02T19:01:32Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:01:32.568640 env[1147]: 2023-10-02 19:01:32.473 [INFO][3210] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host '10.0.0.82' Oct 2 19:01:32.568640 env[1147]: 2023-10-02 19:01:32.481 [INFO][3210] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160" host="10.0.0.82" Oct 2 19:01:32.568640 env[1147]: 2023-10-02 19:01:32.491 [INFO][3210] ipam.go 372: Looking up existing affinities for host host="10.0.0.82" Oct 2 19:01:32.568640 env[1147]: 2023-10-02 19:01:32.495 [INFO][3210] ipam.go 489: Trying affinity for 192.168.61.64/26 host="10.0.0.82" Oct 2 19:01:32.568640 env[1147]: 2023-10-02 19:01:32.499 [INFO][3210] ipam.go 155: Attempting to load block cidr=192.168.61.64/26 host="10.0.0.82" Oct 2 19:01:32.568640 env[1147]: 2023-10-02 19:01:32.504 [INFO][3210] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.61.64/26 host="10.0.0.82" Oct 2 19:01:32.568640 env[1147]: 2023-10-02 19:01:32.504 [INFO][3210] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.61.64/26 handle="k8s-pod-network.9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160" host="10.0.0.82" Oct 2 19:01:32.568640 env[1147]: 2023-10-02 19:01:32.507 [INFO][3210] ipam.go 1682: Creating new handle: k8s-pod-network.9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160 Oct 2 19:01:32.568640 env[1147]: 2023-10-02 19:01:32.511 [INFO][3210] ipam.go 1203: Writing block in order to claim IPs block=192.168.61.64/26 handle="k8s-pod-network.9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160" host="10.0.0.82" Oct 2 19:01:32.568640 env[1147]: 2023-10-02 19:01:32.518 [INFO][3210] ipam.go 1216: Successfully claimed IPs: [192.168.61.70/26] block=192.168.61.64/26 handle="k8s-pod-network.9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160" host="10.0.0.82" Oct 2 19:01:32.568640 env[1147]: 2023-10-02 19:01:32.518 [INFO][3210] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.61.70/26] handle="k8s-pod-network.9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160" host="10.0.0.82" Oct 2 19:01:32.568640 env[1147]: time="2023-10-02T19:01:32Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:01:32.568640 env[1147]: 2023-10-02 19:01:32.519 [INFO][3210] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.61.70/26] IPv6=[] ContainerID="9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160" HandleID="k8s-pod-network.9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160" Workload="10.0.0.82-k8s-calico--apiserver--7b5f4848fc--6zp44-eth0" Oct 2 19:01:32.569258 env[1147]: 2023-10-02 19:01:32.521 [INFO][3196] k8s.go 383: Populated endpoint ContainerID="9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160" Namespace="calico-apiserver" Pod="calico-apiserver-7b5f4848fc-6zp44" WorkloadEndpoint="10.0.0.82-k8s-calico--apiserver--7b5f4848fc--6zp44-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82-k8s-calico--apiserver--7b5f4848fc--6zp44-eth0", GenerateName:"calico-apiserver-7b5f4848fc-", Namespace:"calico-apiserver", SelfLink:"", UID:"06b26f07-4b69-45b9-9e96-7d21f0c6d792", ResourceVersion:"1135", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 1, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7b5f4848fc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.82", ContainerID:"", Pod:"calico-apiserver-7b5f4848fc-6zp44", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.61.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliaf02c1ad0d7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:01:32.569258 env[1147]: 2023-10-02 19:01:32.521 [INFO][3196] k8s.go 384: Calico CNI using IPs: [192.168.61.70/32] ContainerID="9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160" Namespace="calico-apiserver" Pod="calico-apiserver-7b5f4848fc-6zp44" WorkloadEndpoint="10.0.0.82-k8s-calico--apiserver--7b5f4848fc--6zp44-eth0" Oct 2 19:01:32.569258 env[1147]: 2023-10-02 19:01:32.521 [INFO][3196] dataplane_linux.go 68: Setting the host side veth name to caliaf02c1ad0d7 ContainerID="9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160" Namespace="calico-apiserver" Pod="calico-apiserver-7b5f4848fc-6zp44" WorkloadEndpoint="10.0.0.82-k8s-calico--apiserver--7b5f4848fc--6zp44-eth0" Oct 2 19:01:32.569258 env[1147]: 2023-10-02 19:01:32.526 [INFO][3196] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160" Namespace="calico-apiserver" Pod="calico-apiserver-7b5f4848fc-6zp44" WorkloadEndpoint="10.0.0.82-k8s-calico--apiserver--7b5f4848fc--6zp44-eth0" Oct 2 19:01:32.569258 env[1147]: 2023-10-02 19:01:32.543 [INFO][3196] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160" Namespace="calico-apiserver" Pod="calico-apiserver-7b5f4848fc-6zp44" WorkloadEndpoint="10.0.0.82-k8s-calico--apiserver--7b5f4848fc--6zp44-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82-k8s-calico--apiserver--7b5f4848fc--6zp44-eth0", GenerateName:"calico-apiserver-7b5f4848fc-", Namespace:"calico-apiserver", SelfLink:"", UID:"06b26f07-4b69-45b9-9e96-7d21f0c6d792", ResourceVersion:"1135", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 1, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7b5f4848fc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.82", ContainerID:"9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160", Pod:"calico-apiserver-7b5f4848fc-6zp44", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.61.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliaf02c1ad0d7", MAC:"1a:3b:fa:e1:2b:e7", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:01:32.569258 env[1147]: 2023-10-02 19:01:32.566 [INFO][3196] k8s.go 489: Wrote updated endpoint to datastore ContainerID="9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160" Namespace="calico-apiserver" Pod="calico-apiserver-7b5f4848fc-6zp44" WorkloadEndpoint="10.0.0.82-k8s-calico--apiserver--7b5f4848fc--6zp44-eth0" Oct 2 19:01:32.587000 audit[3248]: NETFILTER_CFG table=filter:96 family=2 entries=51 op=nft_register_chain pid=3248 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:01:32.587000 audit[3248]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=26936 a0=3 a1=ffffd4bdf5b0 a2=0 a3=ffffbb922fa0 items=0 ppid=2174 pid=3248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:32.587000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:01:32.590603 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali11a413ef7c8: link becomes ready Oct 2 19:01:32.594342 env[1147]: time="2023-10-02T19:01:32.594097077Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:01:32.594342 env[1147]: time="2023-10-02T19:01:32.594179557Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:01:32.594342 env[1147]: time="2023-10-02T19:01:32.594191517Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:01:32.594694 env[1147]: time="2023-10-02T19:01:32.594415517Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160 pid=3251 runtime=io.containerd.runc.v2 Oct 2 19:01:32.601759 systemd-networkd[1050]: cali11a413ef7c8: Link UP Oct 2 19:01:32.601765 systemd-networkd[1050]: cali11a413ef7c8: Gained carrier Oct 2 19:01:32.615395 systemd[1]: Started cri-containerd-9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160.scope. Oct 2 19:01:32.621737 env[1147]: 2023-10-02 19:01:32.431 [INFO][3190] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {10.0.0.82-k8s-calico--apiserver--7b5f4848fc--fzlhc-eth0 calico-apiserver-7b5f4848fc- calico-apiserver d28490e8-da57-4720-a4c4-44234134b70b 1131 0 2023-10-02 19:01:32 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7b5f4848fc projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s 10.0.0.82 calico-apiserver-7b5f4848fc-fzlhc eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali11a413ef7c8 [] []}} ContainerID="5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3" Namespace="calico-apiserver" Pod="calico-apiserver-7b5f4848fc-fzlhc" WorkloadEndpoint="10.0.0.82-k8s-calico--apiserver--7b5f4848fc--fzlhc-" Oct 2 19:01:32.621737 env[1147]: 2023-10-02 19:01:32.431 [INFO][3190] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3" Namespace="calico-apiserver" Pod="calico-apiserver-7b5f4848fc-fzlhc" WorkloadEndpoint="10.0.0.82-k8s-calico--apiserver--7b5f4848fc--fzlhc-eth0" Oct 2 19:01:32.621737 env[1147]: 2023-10-02 19:01:32.472 [INFO][3215] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3" HandleID="k8s-pod-network.5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3" Workload="10.0.0.82-k8s-calico--apiserver--7b5f4848fc--fzlhc-eth0" Oct 2 19:01:32.621737 env[1147]: 2023-10-02 19:01:32.491 [INFO][3215] ipam_plugin.go 269: Auto assigning IP ContainerID="5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3" HandleID="k8s-pod-network.5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3" Workload="10.0.0.82-k8s-calico--apiserver--7b5f4848fc--fzlhc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000493140), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"10.0.0.82", "pod":"calico-apiserver-7b5f4848fc-fzlhc", "timestamp":"2023-10-02 19:01:32.472314191 +0000 UTC"}, Hostname:"10.0.0.82", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:01:32.621737 env[1147]: time="2023-10-02T19:01:32Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:01:32.621737 env[1147]: time="2023-10-02T19:01:32Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:01:32.621737 env[1147]: 2023-10-02 19:01:32.519 [INFO][3215] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host '10.0.0.82' Oct 2 19:01:32.621737 env[1147]: 2023-10-02 19:01:32.524 [INFO][3215] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3" host="10.0.0.82" Oct 2 19:01:32.621737 env[1147]: 2023-10-02 19:01:32.529 [INFO][3215] ipam.go 372: Looking up existing affinities for host host="10.0.0.82" Oct 2 19:01:32.621737 env[1147]: 2023-10-02 19:01:32.534 [INFO][3215] ipam.go 489: Trying affinity for 192.168.61.64/26 host="10.0.0.82" Oct 2 19:01:32.621737 env[1147]: 2023-10-02 19:01:32.536 [INFO][3215] ipam.go 155: Attempting to load block cidr=192.168.61.64/26 host="10.0.0.82" Oct 2 19:01:32.621737 env[1147]: 2023-10-02 19:01:32.539 [INFO][3215] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.61.64/26 host="10.0.0.82" Oct 2 19:01:32.621737 env[1147]: 2023-10-02 19:01:32.539 [INFO][3215] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.61.64/26 handle="k8s-pod-network.5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3" host="10.0.0.82" Oct 2 19:01:32.621737 env[1147]: 2023-10-02 19:01:32.542 [INFO][3215] ipam.go 1682: Creating new handle: k8s-pod-network.5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3 Oct 2 19:01:32.621737 env[1147]: 2023-10-02 19:01:32.552 [INFO][3215] ipam.go 1203: Writing block in order to claim IPs block=192.168.61.64/26 handle="k8s-pod-network.5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3" host="10.0.0.82" Oct 2 19:01:32.621737 env[1147]: 2023-10-02 19:01:32.578 [INFO][3215] ipam.go 1216: Successfully claimed IPs: [192.168.61.71/26] block=192.168.61.64/26 handle="k8s-pod-network.5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3" host="10.0.0.82" Oct 2 19:01:32.621737 env[1147]: 2023-10-02 19:01:32.579 [INFO][3215] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.61.71/26] handle="k8s-pod-network.5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3" host="10.0.0.82" Oct 2 19:01:32.621737 env[1147]: time="2023-10-02T19:01:32Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:01:32.621737 env[1147]: 2023-10-02 19:01:32.579 [INFO][3215] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.61.71/26] IPv6=[] ContainerID="5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3" HandleID="k8s-pod-network.5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3" Workload="10.0.0.82-k8s-calico--apiserver--7b5f4848fc--fzlhc-eth0" Oct 2 19:01:32.622317 env[1147]: 2023-10-02 19:01:32.587 [INFO][3190] k8s.go 383: Populated endpoint ContainerID="5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3" Namespace="calico-apiserver" Pod="calico-apiserver-7b5f4848fc-fzlhc" WorkloadEndpoint="10.0.0.82-k8s-calico--apiserver--7b5f4848fc--fzlhc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82-k8s-calico--apiserver--7b5f4848fc--fzlhc-eth0", GenerateName:"calico-apiserver-7b5f4848fc-", Namespace:"calico-apiserver", SelfLink:"", UID:"d28490e8-da57-4720-a4c4-44234134b70b", ResourceVersion:"1131", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 1, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7b5f4848fc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.82", ContainerID:"", Pod:"calico-apiserver-7b5f4848fc-fzlhc", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.61.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali11a413ef7c8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:01:32.622317 env[1147]: 2023-10-02 19:01:32.588 [INFO][3190] k8s.go 384: Calico CNI using IPs: [192.168.61.71/32] ContainerID="5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3" Namespace="calico-apiserver" Pod="calico-apiserver-7b5f4848fc-fzlhc" WorkloadEndpoint="10.0.0.82-k8s-calico--apiserver--7b5f4848fc--fzlhc-eth0" Oct 2 19:01:32.622317 env[1147]: 2023-10-02 19:01:32.588 [INFO][3190] dataplane_linux.go 68: Setting the host side veth name to cali11a413ef7c8 ContainerID="5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3" Namespace="calico-apiserver" Pod="calico-apiserver-7b5f4848fc-fzlhc" WorkloadEndpoint="10.0.0.82-k8s-calico--apiserver--7b5f4848fc--fzlhc-eth0" Oct 2 19:01:32.622317 env[1147]: 2023-10-02 19:01:32.592 [INFO][3190] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3" Namespace="calico-apiserver" Pod="calico-apiserver-7b5f4848fc-fzlhc" WorkloadEndpoint="10.0.0.82-k8s-calico--apiserver--7b5f4848fc--fzlhc-eth0" Oct 2 19:01:32.622317 env[1147]: 2023-10-02 19:01:32.602 [INFO][3190] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3" Namespace="calico-apiserver" Pod="calico-apiserver-7b5f4848fc-fzlhc" WorkloadEndpoint="10.0.0.82-k8s-calico--apiserver--7b5f4848fc--fzlhc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.82-k8s-calico--apiserver--7b5f4848fc--fzlhc-eth0", GenerateName:"calico-apiserver-7b5f4848fc-", Namespace:"calico-apiserver", SelfLink:"", UID:"d28490e8-da57-4720-a4c4-44234134b70b", ResourceVersion:"1131", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 1, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7b5f4848fc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.82", ContainerID:"5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3", Pod:"calico-apiserver-7b5f4848fc-fzlhc", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.61.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali11a413ef7c8", MAC:"3e:de:f8:94:da:3a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:01:32.622317 env[1147]: 2023-10-02 19:01:32.613 [INFO][3190] k8s.go 489: Wrote updated endpoint to datastore ContainerID="5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3" Namespace="calico-apiserver" Pod="calico-apiserver-7b5f4848fc-fzlhc" WorkloadEndpoint="10.0.0.82-k8s-calico--apiserver--7b5f4848fc--fzlhc-eth0" Oct 2 19:01:32.633000 audit[3292]: NETFILTER_CFG table=filter:97 family=2 entries=46 op=nft_register_chain pid=3292 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:01:32.633000 audit[3292]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23292 a0=3 a1=fffff0c00060 a2=0 a3=ffffa4f7bfa0 items=0 ppid=2174 pid=3292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:32.633000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:01:32.639126 env[1147]: time="2023-10-02T19:01:32.638784050Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:01:32.639126 env[1147]: time="2023-10-02T19:01:32.638864090Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:01:32.639126 env[1147]: time="2023-10-02T19:01:32.638874850Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:01:32.639661 env[1147]: time="2023-10-02T19:01:32.639615249Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3 pid=3300 runtime=io.containerd.runc.v2 Oct 2 19:01:32.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.638000 audit: BPF prog-id=128 op=LOAD Oct 2 19:01:32.639000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.639000 audit[3261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3251 pid=3261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:32.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961623564623031643332383837383361353633326533633937623631 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3251 pid=3261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:32.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961623564623031643332383837383361353633326533633937623631 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit: BPF prog-id=129 op=LOAD Oct 2 19:01:32.640000 audit[3261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3251 pid=3261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:32.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961623564623031643332383837383361353633326533633937623631 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit: BPF prog-id=130 op=LOAD Oct 2 19:01:32.640000 audit[3261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3251 pid=3261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:32.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961623564623031643332383837383361353633326533633937623631 Oct 2 19:01:32.640000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:01:32.640000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.640000 audit: BPF prog-id=131 op=LOAD Oct 2 19:01:32.640000 audit[3261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3251 pid=3261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:32.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961623564623031643332383837383361353633326533633937623631 Oct 2 19:01:32.644561 systemd-resolved[1092]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 19:01:32.661094 systemd[1]: Started cri-containerd-5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3.scope. Oct 2 19:01:32.678810 env[1147]: time="2023-10-02T19:01:32.678764946Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7b5f4848fc-6zp44,Uid:06b26f07-4b69-45b9-9e96-7d21f0c6d792,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"9ab5db01d3288783a5632e3c97b6103cfcc31c9aeaa32ad36189324a87831160\"" Oct 2 19:01:32.680376 env[1147]: time="2023-10-02T19:01:32.680343985Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:01:32.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.689000 audit: BPF prog-id=132 op=LOAD Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3300 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:32.690000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539323865633636303235646465326566653635613231643064656633 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3300 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:32.690000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539323865633636303235646465326566653635613231643064656633 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit: BPF prog-id=133 op=LOAD Oct 2 19:01:32.690000 audit[3311]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3300 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:32.690000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539323865633636303235646465326566653635613231643064656633 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit: BPF prog-id=134 op=LOAD Oct 2 19:01:32.690000 audit[3311]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3300 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:32.690000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539323865633636303235646465326566653635613231643064656633 Oct 2 19:01:32.690000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:01:32.690000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:32.690000 audit: BPF prog-id=135 op=LOAD Oct 2 19:01:32.690000 audit[3311]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3300 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:32.690000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539323865633636303235646465326566653635613231643064656633 Oct 2 19:01:32.694578 systemd-resolved[1092]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 19:01:32.715319 env[1147]: time="2023-10-02T19:01:32.715279364Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7b5f4848fc-fzlhc,Uid:d28490e8-da57-4720-a4c4-44234134b70b,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"5928ec66025dde2efe65a21d0def379778e62de0b0594c53b13e30f8138e0fb3\"" Oct 2 19:01:32.790793 kubelet[1448]: E1002 19:01:32.790715 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:32.843681 env[1147]: time="2023-10-02T19:01:32.840141408Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:01:32.845672 env[1147]: time="2023-10-02T19:01:32.844514485Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:01:32.846478 kubelet[1448]: E1002 19:01:32.845938 1448 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:01:32.846478 kubelet[1448]: E1002 19:01:32.845984 1448 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:01:32.846478 kubelet[1448]: E1002 19:01:32.846213 1448 kuberuntime_manager.go:862] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-m26zp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-7b5f4848fc-6zp44_calico-apiserver(06b26f07-4b69-45b9-9e96-7d21f0c6d792): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:01:32.846478 kubelet[1448]: E1002 19:01:32.846255 1448 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-7b5f4848fc-6zp44" podUID=06b26f07-4b69-45b9-9e96-7d21f0c6d792 Oct 2 19:01:32.847678 env[1147]: time="2023-10-02T19:01:32.846838324Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:01:33.016499 env[1147]: time="2023-10-02T19:01:33.016425581Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:01:33.017644 env[1147]: time="2023-10-02T19:01:33.017596861Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:01:33.018477 kubelet[1448]: E1002 19:01:33.017847 1448 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:01:33.018477 kubelet[1448]: E1002 19:01:33.018244 1448 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:01:33.018477 kubelet[1448]: E1002 19:01:33.018401 1448 kuberuntime_manager.go:862] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-6sgs5,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-7b5f4848fc-fzlhc_calico-apiserver(d28490e8-da57-4720-a4c4-44234134b70b): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:01:33.018477 kubelet[1448]: E1002 19:01:33.018438 1448 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-7b5f4848fc-fzlhc" podUID=d28490e8-da57-4720-a4c4-44234134b70b Oct 2 19:01:33.080417 kubelet[1448]: E1002 19:01:33.080347 1448 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-7b5f4848fc-6zp44" podUID=06b26f07-4b69-45b9-9e96-7d21f0c6d792 Oct 2 19:01:33.084265 kubelet[1448]: E1002 19:01:33.084234 1448 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-7b5f4848fc-fzlhc" podUID=d28490e8-da57-4720-a4c4-44234134b70b Oct 2 19:01:33.148000 audit[3364]: NETFILTER_CFG table=filter:98 family=2 entries=8 op=nft_register_rule pid=3364 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:01:33.148000 audit[3364]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2620 a0=3 a1=ffffe81729e0 a2=0 a3=ffff98cca6c0 items=0 ppid=1695 pid=3364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:33.148000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:01:33.150000 audit[3364]: NETFILTER_CFG table=nat:99 family=2 entries=78 op=nft_register_rule pid=3364 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:01:33.150000 audit[3364]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24988 a0=3 a1=ffffe81729e0 a2=0 a3=ffff98cca6c0 items=0 ppid=1695 pid=3364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:33.150000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:01:33.791906 kubelet[1448]: E1002 19:01:33.791854 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 19:01:33.973977 systemd-networkd[1050]: cali11a413ef7c8: Gained IPv6LL Oct 2 19:01:34.085766 kubelet[1448]: E1002 19:01:34.085516 1448 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-7b5f4848fc-6zp44" podUID=06b26f07-4b69-45b9-9e96-7d21f0c6d792 Oct 2 19:01:34.085766 kubelet[1448]: E1002 19:01:34.085663 1448 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-7b5f4848fc-fzlhc" podUID=d28490e8-da57-4720-a4c4-44234134b70b Oct 2 19:01:34.205298 kernel: kauditd_printk_skb: 185 callbacks suppressed Oct 2 19:01:34.205432 kernel: audit: type=1325 audit(1696273294.202:940): table=filter:100 family=2 entries=8 op=nft_register_rule pid=3392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:01:34.202000 audit[3392]: NETFILTER_CFG table=filter:100 family=2 entries=8 op=nft_register_rule pid=3392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:01:34.202000 audit[3392]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2620 a0=3 a1=ffffdddb85b0 a2=0 a3=ffffa064e6c0 items=0 ppid=1695 pid=3392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:34.210809 kernel: audit: type=1300 audit(1696273294.202:940): arch=c00000b7 syscall=211 success=yes exit=2620 a0=3 a1=ffffdddb85b0 a2=0 a3=ffffa064e6c0 items=0 ppid=1695 pid=3392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:34.210888 kernel: audit: type=1327 audit(1696273294.202:940): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:01:34.202000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:01:34.204000 audit[3392]: NETFILTER_CFG table=nat:101 family=2 entries=78 op=nft_register_rule pid=3392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:01:34.204000 audit[3392]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24988 a0=3 a1=ffffdddb85b0 a2=0 a3=ffffa064e6c0 items=0 ppid=1695 pid=3392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:34.225180 kernel: audit: type=1325 audit(1696273294.204:941): table=nat:101 family=2 entries=78 op=nft_register_rule pid=3392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:01:34.225269 kernel: audit: type=1300 audit(1696273294.204:941): arch=c00000b7 syscall=211 success=yes exit=24988 a0=3 a1=ffffdddb85b0 a2=0 a3=ffffa064e6c0 items=0 ppid=1695 pid=3392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:34.225303 kernel: audit: type=1327 audit(1696273294.204:941): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:01:34.204000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:01:34.549779 systemd-networkd[1050]: caliaf02c1ad0d7: Gained IPv6LL Oct 2 19:01:34.793463 kubelet[1448]: E1002 19:01:34.793411 1448 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests"