Oct 2 18:44:44.766300 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Oct 2 18:44:44.766320 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 18:44:44.766328 kernel: efi: EFI v2.70 by EDK II Oct 2 18:44:44.766334 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Oct 2 18:44:44.766339 kernel: random: crng init done Oct 2 18:44:44.766345 kernel: ACPI: Early table checksum verification disabled Oct 2 18:44:44.766351 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Oct 2 18:44:44.766358 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Oct 2 18:44:44.766363 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 18:44:44.766369 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 18:44:44.766375 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 18:44:44.766380 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 18:44:44.766386 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 18:44:44.766391 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 18:44:44.766399 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 18:44:44.766405 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 18:44:44.766411 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 18:44:44.766417 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Oct 2 18:44:44.766423 kernel: NUMA: Failed to initialise from firmware Oct 2 18:44:44.766429 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 18:44:44.766435 kernel: NUMA: NODE_DATA [mem 0xdcb0b900-0xdcb10fff] Oct 2 18:44:44.766440 kernel: Zone ranges: Oct 2 18:44:44.766459 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 18:44:44.766467 kernel: DMA32 empty Oct 2 18:44:44.766473 kernel: Normal empty Oct 2 18:44:44.766478 kernel: Movable zone start for each node Oct 2 18:44:44.766484 kernel: Early memory node ranges Oct 2 18:44:44.766490 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Oct 2 18:44:44.766496 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Oct 2 18:44:44.766502 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Oct 2 18:44:44.766508 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Oct 2 18:44:44.766514 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Oct 2 18:44:44.766519 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Oct 2 18:44:44.766525 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Oct 2 18:44:44.766531 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 18:44:44.766538 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Oct 2 18:44:44.766544 kernel: psci: probing for conduit method from ACPI. Oct 2 18:44:44.766550 kernel: psci: PSCIv1.1 detected in firmware. Oct 2 18:44:44.766555 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 18:44:44.766561 kernel: psci: Trusted OS migration not required Oct 2 18:44:44.766570 kernel: psci: SMC Calling Convention v1.1 Oct 2 18:44:44.766576 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Oct 2 18:44:44.766584 kernel: ACPI: SRAT not present Oct 2 18:44:44.766590 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 18:44:44.766596 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 18:44:44.766603 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Oct 2 18:44:44.766609 kernel: Detected PIPT I-cache on CPU0 Oct 2 18:44:44.766615 kernel: CPU features: detected: GIC system register CPU interface Oct 2 18:44:44.766621 kernel: CPU features: detected: Hardware dirty bit management Oct 2 18:44:44.766627 kernel: CPU features: detected: Spectre-v4 Oct 2 18:44:44.766634 kernel: CPU features: detected: Spectre-BHB Oct 2 18:44:44.766641 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 18:44:44.766647 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 18:44:44.766653 kernel: CPU features: detected: ARM erratum 1418040 Oct 2 18:44:44.766659 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Oct 2 18:44:44.766665 kernel: Policy zone: DMA Oct 2 18:44:44.766673 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 18:44:44.766680 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 18:44:44.766686 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 18:44:44.766692 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 18:44:44.766698 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 18:44:44.766704 kernel: Memory: 2459280K/2572288K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 113008K reserved, 0K cma-reserved) Oct 2 18:44:44.766712 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 2 18:44:44.766718 kernel: trace event string verifier disabled Oct 2 18:44:44.766724 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 18:44:44.766730 kernel: rcu: RCU event tracing is enabled. Oct 2 18:44:44.766737 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 2 18:44:44.766743 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 18:44:44.766749 kernel: Tracing variant of Tasks RCU enabled. Oct 2 18:44:44.766756 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 18:44:44.766817 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 2 18:44:44.766824 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 18:44:44.766830 kernel: GICv3: 256 SPIs implemented Oct 2 18:44:44.766839 kernel: GICv3: 0 Extended SPIs implemented Oct 2 18:44:44.766845 kernel: GICv3: Distributor has no Range Selector support Oct 2 18:44:44.766851 kernel: Root IRQ handler: gic_handle_irq Oct 2 18:44:44.766857 kernel: GICv3: 16 PPIs implemented Oct 2 18:44:44.766864 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Oct 2 18:44:44.766870 kernel: ACPI: SRAT not present Oct 2 18:44:44.766876 kernel: ITS [mem 0x08080000-0x0809ffff] Oct 2 18:44:44.766882 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Oct 2 18:44:44.766888 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Oct 2 18:44:44.766895 kernel: GICv3: using LPI property table @0x00000000400d0000 Oct 2 18:44:44.766901 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Oct 2 18:44:44.766907 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 18:44:44.766915 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Oct 2 18:44:44.766921 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Oct 2 18:44:44.766928 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Oct 2 18:44:44.766934 kernel: arm-pv: using stolen time PV Oct 2 18:44:44.766940 kernel: Console: colour dummy device 80x25 Oct 2 18:44:44.766946 kernel: ACPI: Core revision 20210730 Oct 2 18:44:44.766953 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Oct 2 18:44:44.766959 kernel: pid_max: default: 32768 minimum: 301 Oct 2 18:44:44.766965 kernel: LSM: Security Framework initializing Oct 2 18:44:44.766971 kernel: SELinux: Initializing. Oct 2 18:44:44.766979 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 18:44:44.766985 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 18:44:44.766991 kernel: rcu: Hierarchical SRCU implementation. Oct 2 18:44:44.766997 kernel: Platform MSI: ITS@0x8080000 domain created Oct 2 18:44:44.767004 kernel: PCI/MSI: ITS@0x8080000 domain created Oct 2 18:44:44.767010 kernel: Remapping and enabling EFI services. Oct 2 18:44:44.767016 kernel: smp: Bringing up secondary CPUs ... Oct 2 18:44:44.767022 kernel: Detected PIPT I-cache on CPU1 Oct 2 18:44:44.767028 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Oct 2 18:44:44.767036 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Oct 2 18:44:44.767042 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 18:44:44.767049 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Oct 2 18:44:44.767055 kernel: Detected PIPT I-cache on CPU2 Oct 2 18:44:44.767061 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Oct 2 18:44:44.767068 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Oct 2 18:44:44.767074 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 18:44:44.767080 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Oct 2 18:44:44.767086 kernel: Detected PIPT I-cache on CPU3 Oct 2 18:44:44.767092 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Oct 2 18:44:44.767100 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Oct 2 18:44:44.767173 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 18:44:44.767182 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Oct 2 18:44:44.767188 kernel: smp: Brought up 1 node, 4 CPUs Oct 2 18:44:44.767201 kernel: SMP: Total of 4 processors activated. Oct 2 18:44:44.767209 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 18:44:44.767216 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 2 18:44:44.767222 kernel: CPU features: detected: Common not Private translations Oct 2 18:44:44.767229 kernel: CPU features: detected: CRC32 instructions Oct 2 18:44:44.767236 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 2 18:44:44.767242 kernel: CPU features: detected: LSE atomic instructions Oct 2 18:44:44.767249 kernel: CPU features: detected: Privileged Access Never Oct 2 18:44:44.767257 kernel: CPU features: detected: RAS Extension Support Oct 2 18:44:44.767263 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Oct 2 18:44:44.767270 kernel: CPU: All CPU(s) started at EL1 Oct 2 18:44:44.767277 kernel: alternatives: patching kernel code Oct 2 18:44:44.767792 kernel: devtmpfs: initialized Oct 2 18:44:44.767803 kernel: KASLR enabled Oct 2 18:44:44.767810 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 18:44:44.767817 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 2 18:44:44.767824 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 18:44:44.767830 kernel: SMBIOS 3.0.0 present. Oct 2 18:44:44.767837 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Oct 2 18:44:44.767844 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 18:44:44.767851 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 18:44:44.767857 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 18:44:44.767869 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 18:44:44.767875 kernel: audit: initializing netlink subsys (disabled) Oct 2 18:44:44.767882 kernel: audit: type=2000 audit(0.037:1): state=initialized audit_enabled=0 res=1 Oct 2 18:44:44.767889 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 18:44:44.767895 kernel: cpuidle: using governor menu Oct 2 18:44:44.767902 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 18:44:44.767909 kernel: ASID allocator initialised with 32768 entries Oct 2 18:44:44.767915 kernel: ACPI: bus type PCI registered Oct 2 18:44:44.767922 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 18:44:44.767930 kernel: Serial: AMBA PL011 UART driver Oct 2 18:44:44.767937 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 18:44:44.767943 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 18:44:44.767950 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 18:44:44.767957 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 18:44:44.767964 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 18:44:44.767971 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 18:44:44.767977 kernel: ACPI: Added _OSI(Module Device) Oct 2 18:44:44.767984 kernel: ACPI: Added _OSI(Processor Device) Oct 2 18:44:44.767992 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 18:44:44.767999 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 18:44:44.768005 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 18:44:44.768012 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 18:44:44.768019 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 18:44:44.768026 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 18:44:44.768032 kernel: ACPI: Interpreter enabled Oct 2 18:44:44.768039 kernel: ACPI: Using GIC for interrupt routing Oct 2 18:44:44.768045 kernel: ACPI: MCFG table detected, 1 entries Oct 2 18:44:44.768054 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Oct 2 18:44:44.768060 kernel: printk: console [ttyAMA0] enabled Oct 2 18:44:44.768067 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 18:44:44.768229 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 18:44:44.768328 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 2 18:44:44.768391 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 2 18:44:44.768482 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Oct 2 18:44:44.768551 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Oct 2 18:44:44.768560 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Oct 2 18:44:44.768567 kernel: PCI host bridge to bus 0000:00 Oct 2 18:44:44.768639 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Oct 2 18:44:44.768692 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 2 18:44:44.768745 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Oct 2 18:44:44.768796 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 18:44:44.768871 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Oct 2 18:44:44.768950 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 18:44:44.769011 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Oct 2 18:44:44.769070 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Oct 2 18:44:44.769129 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Oct 2 18:44:44.769199 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Oct 2 18:44:44.769258 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Oct 2 18:44:44.769320 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Oct 2 18:44:44.769374 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Oct 2 18:44:44.769430 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 2 18:44:44.769494 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Oct 2 18:44:44.769503 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 2 18:44:44.769510 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 2 18:44:44.769517 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 2 18:44:44.769526 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 2 18:44:44.769532 kernel: iommu: Default domain type: Translated Oct 2 18:44:44.769539 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 18:44:44.769546 kernel: vgaarb: loaded Oct 2 18:44:44.769552 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 18:44:44.769559 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 18:44:44.769566 kernel: PTP clock support registered Oct 2 18:44:44.769572 kernel: Registered efivars operations Oct 2 18:44:44.769579 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 18:44:44.769585 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 18:44:44.769594 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 18:44:44.769601 kernel: pnp: PnP ACPI init Oct 2 18:44:44.769666 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Oct 2 18:44:44.769676 kernel: pnp: PnP ACPI: found 1 devices Oct 2 18:44:44.769683 kernel: NET: Registered PF_INET protocol family Oct 2 18:44:44.769690 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 18:44:44.769696 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 18:44:44.769703 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 18:44:44.769712 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 18:44:44.770254 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 18:44:44.770261 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 18:44:44.770268 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 18:44:44.770275 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 18:44:44.770282 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 18:44:44.770288 kernel: PCI: CLS 0 bytes, default 64 Oct 2 18:44:44.770295 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Oct 2 18:44:44.770305 kernel: kvm [1]: HYP mode not available Oct 2 18:44:44.770312 kernel: Initialise system trusted keyrings Oct 2 18:44:44.770319 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 18:44:44.770326 kernel: Key type asymmetric registered Oct 2 18:44:44.770332 kernel: Asymmetric key parser 'x509' registered Oct 2 18:44:44.770339 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 18:44:44.770346 kernel: io scheduler mq-deadline registered Oct 2 18:44:44.770352 kernel: io scheduler kyber registered Oct 2 18:44:44.770359 kernel: io scheduler bfq registered Oct 2 18:44:44.770366 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 2 18:44:44.770374 kernel: ACPI: button: Power Button [PWRB] Oct 2 18:44:44.770382 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 2 18:44:44.770519 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Oct 2 18:44:44.770532 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 18:44:44.770539 kernel: thunder_xcv, ver 1.0 Oct 2 18:44:44.770546 kernel: thunder_bgx, ver 1.0 Oct 2 18:44:44.770552 kernel: nicpf, ver 1.0 Oct 2 18:44:44.770559 kernel: nicvf, ver 1.0 Oct 2 18:44:44.770636 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 18:44:44.770699 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T18:44:44 UTC (1696272284) Oct 2 18:44:44.770708 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 18:44:44.770715 kernel: NET: Registered PF_INET6 protocol family Oct 2 18:44:44.770722 kernel: Segment Routing with IPv6 Oct 2 18:44:44.770728 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 18:44:44.770735 kernel: NET: Registered PF_PACKET protocol family Oct 2 18:44:44.770741 kernel: Key type dns_resolver registered Oct 2 18:44:44.770748 kernel: registered taskstats version 1 Oct 2 18:44:44.770757 kernel: Loading compiled-in X.509 certificates Oct 2 18:44:44.770764 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 18:44:44.770770 kernel: Key type .fscrypt registered Oct 2 18:44:44.770777 kernel: Key type fscrypt-provisioning registered Oct 2 18:44:44.770784 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 18:44:44.770791 kernel: ima: Allocated hash algorithm: sha1 Oct 2 18:44:44.770797 kernel: ima: No architecture policies found Oct 2 18:44:44.770804 kernel: Freeing unused kernel memory: 34560K Oct 2 18:44:44.770811 kernel: Run /init as init process Oct 2 18:44:44.770819 kernel: with arguments: Oct 2 18:44:44.770825 kernel: /init Oct 2 18:44:44.770832 kernel: with environment: Oct 2 18:44:44.770838 kernel: HOME=/ Oct 2 18:44:44.770845 kernel: TERM=linux Oct 2 18:44:44.770851 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 18:44:44.770860 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 18:44:44.770869 systemd[1]: Detected virtualization kvm. Oct 2 18:44:44.770878 systemd[1]: Detected architecture arm64. Oct 2 18:44:44.770886 systemd[1]: Running in initrd. Oct 2 18:44:44.770893 systemd[1]: No hostname configured, using default hostname. Oct 2 18:44:44.770900 systemd[1]: Hostname set to . Oct 2 18:44:44.770908 systemd[1]: Initializing machine ID from VM UUID. Oct 2 18:44:44.770915 systemd[1]: Queued start job for default target initrd.target. Oct 2 18:44:44.770922 systemd[1]: Started systemd-ask-password-console.path. Oct 2 18:44:44.770929 systemd[1]: Reached target cryptsetup.target. Oct 2 18:44:44.770937 systemd[1]: Reached target paths.target. Oct 2 18:44:44.770944 systemd[1]: Reached target slices.target. Oct 2 18:44:44.770951 systemd[1]: Reached target swap.target. Oct 2 18:44:44.770959 systemd[1]: Reached target timers.target. Oct 2 18:44:44.770967 systemd[1]: Listening on iscsid.socket. Oct 2 18:44:44.770974 systemd[1]: Listening on iscsiuio.socket. Oct 2 18:44:44.771804 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 18:44:44.771825 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 18:44:44.771833 systemd[1]: Listening on systemd-journald.socket. Oct 2 18:44:44.771840 systemd[1]: Listening on systemd-networkd.socket. Oct 2 18:44:44.771848 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 18:44:44.771855 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 18:44:44.771863 systemd[1]: Reached target sockets.target. Oct 2 18:44:44.771870 systemd[1]: Starting kmod-static-nodes.service... Oct 2 18:44:44.771877 systemd[1]: Finished network-cleanup.service. Oct 2 18:44:44.771884 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 18:44:44.771893 systemd[1]: Starting systemd-journald.service... Oct 2 18:44:44.771901 systemd[1]: Starting systemd-modules-load.service... Oct 2 18:44:44.771908 systemd[1]: Starting systemd-resolved.service... Oct 2 18:44:44.771915 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 18:44:44.771923 systemd[1]: Finished kmod-static-nodes.service. Oct 2 18:44:44.771930 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 18:44:44.771937 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 18:44:44.771944 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 18:44:44.771951 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 18:44:44.771960 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 18:44:44.771968 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 18:44:44.771975 kernel: Bridge firewalling registered Oct 2 18:44:44.771986 systemd-journald[291]: Journal started Oct 2 18:44:44.772037 systemd-journald[291]: Runtime Journal (/run/log/journal/601bcfb1506d41d4899e9d938318f120) is 6.0M, max 48.7M, 42.6M free. Oct 2 18:44:44.742887 systemd-modules-load[292]: Inserted module 'overlay' Oct 2 18:44:44.763843 systemd-modules-load[292]: Inserted module 'br_netfilter' Oct 2 18:44:44.774541 systemd[1]: Started systemd-journald.service. Oct 2 18:44:44.774841 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 18:44:44.781005 kernel: audit: type=1130 audit(1696272284.773:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:44.781025 kernel: SCSI subsystem initialized Oct 2 18:44:44.781039 kernel: audit: type=1130 audit(1696272284.777:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:44.773000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:44.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:44.780308 systemd[1]: Starting dracut-cmdline.service... Oct 2 18:44:44.784466 systemd-resolved[293]: Positive Trust Anchors: Oct 2 18:44:44.788414 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 18:44:44.788434 kernel: device-mapper: uevent: version 1.0.3 Oct 2 18:44:44.788442 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 18:44:44.784475 systemd-resolved[293]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 18:44:44.784502 systemd-resolved[293]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 18:44:44.789000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:44.796525 dracut-cmdline[309]: dracut-dracut-053 Oct 2 18:44:44.799283 kernel: audit: type=1130 audit(1696272284.789:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:44.799301 kernel: audit: type=1130 audit(1696272284.796:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:44.796000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:44.788358 systemd-modules-load[292]: Inserted module 'dm_multipath' Oct 2 18:44:44.802053 dracut-cmdline[309]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 18:44:44.788933 systemd-resolved[293]: Defaulting to hostname 'linux'. Oct 2 18:44:44.789275 systemd[1]: Finished systemd-modules-load.service. Oct 2 18:44:44.790222 systemd[1]: Started systemd-resolved.service. Oct 2 18:44:44.797292 systemd[1]: Reached target nss-lookup.target. Oct 2 18:44:44.800596 systemd[1]: Starting systemd-sysctl.service... Oct 2 18:44:44.811997 systemd[1]: Finished systemd-sysctl.service. Oct 2 18:44:44.812000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:44.815476 kernel: audit: type=1130 audit(1696272284.812:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:44.896621 kernel: Loading iSCSI transport class v2.0-870. Oct 2 18:44:44.907472 kernel: iscsi: registered transport (tcp) Oct 2 18:44:44.922225 kernel: iscsi: registered transport (qla4xxx) Oct 2 18:44:44.922270 kernel: QLogic iSCSI HBA Driver Oct 2 18:44:44.994586 systemd[1]: Finished dracut-cmdline.service. Oct 2 18:44:44.994000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:44.996074 systemd[1]: Starting dracut-pre-udev.service... Oct 2 18:44:44.998396 kernel: audit: type=1130 audit(1696272284.994:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:45.050223 kernel: raid6: neonx8 gen() 13350 MB/s Oct 2 18:44:45.066523 kernel: raid6: neonx8 xor() 10231 MB/s Oct 2 18:44:45.083526 kernel: raid6: neonx4 gen() 13527 MB/s Oct 2 18:44:45.100466 kernel: raid6: neonx4 xor() 11279 MB/s Oct 2 18:44:45.117462 kernel: raid6: neonx2 gen() 12966 MB/s Oct 2 18:44:45.135207 kernel: raid6: neonx2 xor() 10207 MB/s Oct 2 18:44:45.151467 kernel: raid6: neonx1 gen() 10467 MB/s Oct 2 18:44:45.168476 kernel: raid6: neonx1 xor() 8784 MB/s Oct 2 18:44:45.185471 kernel: raid6: int64x8 gen() 6285 MB/s Oct 2 18:44:45.202476 kernel: raid6: int64x8 xor() 3543 MB/s Oct 2 18:44:45.219466 kernel: raid6: int64x4 gen() 7283 MB/s Oct 2 18:44:45.236472 kernel: raid6: int64x4 xor() 3852 MB/s Oct 2 18:44:45.253465 kernel: raid6: int64x2 gen() 6145 MB/s Oct 2 18:44:45.270475 kernel: raid6: int64x2 xor() 3317 MB/s Oct 2 18:44:45.287737 kernel: raid6: int64x1 gen() 5037 MB/s Oct 2 18:44:45.304609 kernel: raid6: int64x1 xor() 2641 MB/s Oct 2 18:44:45.304647 kernel: raid6: using algorithm neonx4 gen() 13527 MB/s Oct 2 18:44:45.304657 kernel: raid6: .... xor() 11279 MB/s, rmw enabled Oct 2 18:44:45.304665 kernel: raid6: using neon recovery algorithm Oct 2 18:44:45.315573 kernel: xor: measuring software checksum speed Oct 2 18:44:45.315605 kernel: 8regs : 17297 MB/sec Oct 2 18:44:45.316458 kernel: 32regs : 20749 MB/sec Oct 2 18:44:45.317496 kernel: arm64_neon : 27854 MB/sec Oct 2 18:44:45.317517 kernel: xor: using function: arm64_neon (27854 MB/sec) Oct 2 18:44:45.371482 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 18:44:45.390330 systemd[1]: Finished dracut-pre-udev.service. Oct 2 18:44:45.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:45.390000 audit: BPF prog-id=7 op=LOAD Oct 2 18:44:45.390000 audit: BPF prog-id=8 op=LOAD Oct 2 18:44:45.394189 systemd[1]: Starting systemd-udevd.service... Oct 2 18:44:45.395434 kernel: audit: type=1130 audit(1696272285.390:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:45.395461 kernel: audit: type=1334 audit(1696272285.390:9): prog-id=7 op=LOAD Oct 2 18:44:45.395471 kernel: audit: type=1334 audit(1696272285.390:10): prog-id=8 op=LOAD Oct 2 18:44:45.410246 systemd-udevd[493]: Using default interface naming scheme 'v252'. Oct 2 18:44:45.413841 systemd[1]: Started systemd-udevd.service. Oct 2 18:44:45.415976 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 18:44:45.414000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:45.430403 dracut-pre-trigger[499]: rd.md=0: removing MD RAID activation Oct 2 18:44:45.468272 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 18:44:45.468000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:45.472951 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 18:44:45.507879 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 18:44:45.507000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:45.544623 kernel: virtio_blk virtio1: [vda] 9289728 512-byte logical blocks (4.76 GB/4.43 GiB) Oct 2 18:44:45.549471 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 18:44:45.573476 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (544) Oct 2 18:44:45.574576 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 18:44:45.575976 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 18:44:45.585609 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 18:44:45.593744 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 18:44:45.599957 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 18:44:45.601742 systemd[1]: Starting disk-uuid.service... Oct 2 18:44:45.614883 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 18:44:46.632467 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 18:44:46.632520 disk-uuid[563]: The operation has completed successfully. Oct 2 18:44:46.656737 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 18:44:46.656000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:46.656000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:46.656849 systemd[1]: Finished disk-uuid.service. Oct 2 18:44:46.661097 systemd[1]: Starting verity-setup.service... Oct 2 18:44:46.678468 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 18:44:46.701472 systemd[1]: Found device dev-mapper-usr.device. Oct 2 18:44:46.702732 systemd[1]: Mounting sysusr-usr.mount... Oct 2 18:44:46.703575 systemd[1]: Finished verity-setup.service. Oct 2 18:44:46.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:46.752193 systemd[1]: Mounted sysusr-usr.mount. Oct 2 18:44:46.753286 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 18:44:46.752853 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 18:44:46.753597 systemd[1]: Starting ignition-setup.service... Oct 2 18:44:46.755351 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 18:44:46.763633 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 18:44:46.763673 kernel: BTRFS info (device vda6): using free space tree Oct 2 18:44:46.763690 kernel: BTRFS info (device vda6): has skinny extents Oct 2 18:44:46.773481 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 18:44:46.783774 systemd[1]: Finished ignition-setup.service. Oct 2 18:44:46.783000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:46.785319 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 18:44:46.885761 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 18:44:46.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:46.886000 audit: BPF prog-id=9 op=LOAD Oct 2 18:44:46.888078 systemd[1]: Starting systemd-networkd.service... Oct 2 18:44:46.915486 systemd-networkd[739]: lo: Link UP Oct 2 18:44:46.915590 systemd-networkd[739]: lo: Gained carrier Oct 2 18:44:46.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:46.916005 systemd-networkd[739]: Enumeration completed Oct 2 18:44:46.916100 systemd[1]: Started systemd-networkd.service. Oct 2 18:44:46.916923 systemd[1]: Reached target network.target. Oct 2 18:44:46.918583 systemd[1]: Starting iscsiuio.service... Oct 2 18:44:46.919700 systemd-networkd[739]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 18:44:46.921330 systemd-networkd[739]: eth0: Link UP Oct 2 18:44:46.921334 systemd-networkd[739]: eth0: Gained carrier Oct 2 18:44:46.926344 ignition[645]: Ignition 2.14.0 Oct 2 18:44:46.926358 ignition[645]: Stage: fetch-offline Oct 2 18:44:46.926414 ignition[645]: no configs at "/usr/lib/ignition/base.d" Oct 2 18:44:46.926425 ignition[645]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 18:44:46.926587 ignition[645]: parsed url from cmdline: "" Oct 2 18:44:46.926590 ignition[645]: no config URL provided Oct 2 18:44:46.926595 ignition[645]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 18:44:46.926603 ignition[645]: no config at "/usr/lib/ignition/user.ign" Oct 2 18:44:46.931622 systemd[1]: Started iscsiuio.service. Oct 2 18:44:46.926621 ignition[645]: op(1): [started] loading QEMU firmware config module Oct 2 18:44:46.932000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:46.926626 ignition[645]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 2 18:44:46.934824 systemd[1]: Starting iscsid.service... Oct 2 18:44:46.931692 ignition[645]: op(1): [finished] loading QEMU firmware config module Oct 2 18:44:46.939033 iscsid[746]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 18:44:46.939033 iscsid[746]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 18:44:46.939033 iscsid[746]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 18:44:46.939033 iscsid[746]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 18:44:46.939033 iscsid[746]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 18:44:46.939033 iscsid[746]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 18:44:46.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:46.942696 systemd[1]: Started iscsid.service. Oct 2 18:44:46.946506 systemd[1]: Starting dracut-initqueue.service... Oct 2 18:44:46.947535 systemd-networkd[739]: eth0: DHCPv4 address 10.0.0.18/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 18:44:46.961009 systemd[1]: Finished dracut-initqueue.service. Oct 2 18:44:46.961901 systemd[1]: Reached target remote-fs-pre.target. Oct 2 18:44:46.963330 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 18:44:46.964711 systemd[1]: Reached target remote-fs.target. Oct 2 18:44:46.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:46.966836 systemd[1]: Starting dracut-pre-mount.service... Oct 2 18:44:46.978384 systemd[1]: Finished dracut-pre-mount.service. Oct 2 18:44:46.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:46.994022 ignition[645]: parsing config with SHA512: ef276170a67a3abba2bfb40d2f28ee9127ca0f70c0e16a62d370290102f5e04b62f62ea794617471b50342cd8f1f21ceda1d1a80183f5e00b2390ee665f6e75c Oct 2 18:44:47.030853 unknown[645]: fetched base config from "system" Oct 2 18:44:47.030863 unknown[645]: fetched user config from "qemu" Oct 2 18:44:47.031277 ignition[645]: fetch-offline: fetch-offline passed Oct 2 18:44:47.031337 ignition[645]: Ignition finished successfully Oct 2 18:44:47.032000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:47.032578 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 18:44:47.033379 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 2 18:44:47.034372 systemd[1]: Starting ignition-kargs.service... Oct 2 18:44:47.044878 ignition[760]: Ignition 2.14.0 Oct 2 18:44:47.044887 ignition[760]: Stage: kargs Oct 2 18:44:47.044976 ignition[760]: no configs at "/usr/lib/ignition/base.d" Oct 2 18:44:47.044985 ignition[760]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 18:44:47.045909 ignition[760]: kargs: kargs passed Oct 2 18:44:47.045952 ignition[760]: Ignition finished successfully Oct 2 18:44:47.049377 systemd[1]: Finished ignition-kargs.service. Oct 2 18:44:47.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:47.051528 systemd[1]: Starting ignition-disks.service... Oct 2 18:44:47.060836 ignition[766]: Ignition 2.14.0 Oct 2 18:44:47.060847 ignition[766]: Stage: disks Oct 2 18:44:47.060938 ignition[766]: no configs at "/usr/lib/ignition/base.d" Oct 2 18:44:47.060947 ignition[766]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 18:44:47.062013 ignition[766]: disks: disks passed Oct 2 18:44:47.062064 ignition[766]: Ignition finished successfully Oct 2 18:44:47.063000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:47.063588 systemd[1]: Finished ignition-disks.service. Oct 2 18:44:47.064361 systemd[1]: Reached target initrd-root-device.target. Oct 2 18:44:47.065265 systemd[1]: Reached target local-fs-pre.target. Oct 2 18:44:47.066352 systemd[1]: Reached target local-fs.target. Oct 2 18:44:47.067501 systemd[1]: Reached target sysinit.target. Oct 2 18:44:47.068432 systemd[1]: Reached target basic.target. Oct 2 18:44:47.070405 systemd[1]: Starting systemd-fsck-root.service... Oct 2 18:44:47.088115 systemd-fsck[774]: ROOT: clean, 603/553520 files, 56011/553472 blocks Oct 2 18:44:47.094805 systemd[1]: Finished systemd-fsck-root.service. Oct 2 18:44:47.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:47.096686 systemd[1]: Mounting sysroot.mount... Oct 2 18:44:47.107877 systemd[1]: Mounted sysroot.mount. Oct 2 18:44:47.108461 systemd[1]: Reached target initrd-root-fs.target. Oct 2 18:44:47.109982 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 18:44:47.110404 systemd[1]: Mounting sysroot-usr.mount... Oct 2 18:44:47.111282 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 18:44:47.111321 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 18:44:47.111343 systemd[1]: Reached target ignition-diskful.target. Oct 2 18:44:47.114146 systemd[1]: Mounted sysroot-usr.mount. Oct 2 18:44:47.116038 systemd[1]: Starting initrd-setup-root.service... Oct 2 18:44:47.122473 initrd-setup-root[784]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 18:44:47.129029 initrd-setup-root[792]: cut: /sysroot/etc/group: No such file or directory Oct 2 18:44:47.134815 initrd-setup-root[800]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 18:44:47.139845 initrd-setup-root[808]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 18:44:47.179019 systemd[1]: Finished initrd-setup-root.service. Oct 2 18:44:47.179000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:47.180813 systemd[1]: Starting ignition-mount.service... Oct 2 18:44:47.182492 systemd[1]: Starting sysroot-boot.service... Oct 2 18:44:47.188671 bash[825]: umount: /sysroot/usr/share/oem: not mounted. Oct 2 18:44:47.201420 ignition[827]: INFO : Ignition 2.14.0 Oct 2 18:44:47.201420 ignition[827]: INFO : Stage: mount Oct 2 18:44:47.201420 ignition[827]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 18:44:47.201420 ignition[827]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 18:44:47.205220 ignition[827]: INFO : mount: mount passed Oct 2 18:44:47.205220 ignition[827]: INFO : Ignition finished successfully Oct 2 18:44:47.205000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:47.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:47.204687 systemd[1]: Finished sysroot-boot.service. Oct 2 18:44:47.206110 systemd[1]: Finished ignition-mount.service. Oct 2 18:44:47.711217 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 18:44:47.725971 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (835) Oct 2 18:44:47.728033 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 18:44:47.728049 kernel: BTRFS info (device vda6): using free space tree Oct 2 18:44:47.728059 kernel: BTRFS info (device vda6): has skinny extents Oct 2 18:44:47.732986 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 18:44:47.734475 systemd[1]: Starting ignition-files.service... Oct 2 18:44:47.754265 ignition[855]: INFO : Ignition 2.14.0 Oct 2 18:44:47.754265 ignition[855]: INFO : Stage: files Oct 2 18:44:47.755424 ignition[855]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 18:44:47.755424 ignition[855]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 18:44:47.755424 ignition[855]: DEBUG : files: compiled without relabeling support, skipping Oct 2 18:44:47.760436 ignition[855]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 18:44:47.760436 ignition[855]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 18:44:47.764378 ignition[855]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 18:44:47.765592 ignition[855]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 18:44:47.765592 ignition[855]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 18:44:47.765325 unknown[855]: wrote ssh authorized keys file for user: core Oct 2 18:44:47.768626 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 18:44:47.768626 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-arm64-v1.1.1.tgz: attempt #1 Oct 2 18:44:48.064890 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 18:44:48.201616 systemd-networkd[739]: eth0: Gained IPv6LL Oct 2 18:44:48.404782 ignition[855]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 6b5df61a53601926e4b5a9174828123d555f592165439f541bc117c68781f41c8bd30dccd52367e406d104df849bcbcfb72d9c4bafda4b045c59ce95d0ca0742 Oct 2 18:44:48.406971 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 18:44:48.406971 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 18:44:48.406971 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-arm64.tar.gz: attempt #1 Oct 2 18:44:48.561867 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 18:44:48.695350 ignition[855]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: 4c7e4541123cbd6f1d6fec1f827395cd58d65716c0998de790f965485738b6d6257c0dc46fd7f66403166c299f6d5bf9ff30b6e1ff9afbb071f17005e834518c Oct 2 18:44:48.695350 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 18:44:48.698811 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 18:44:48.698811 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubeadm: attempt #1 Oct 2 18:44:48.759341 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 18:44:49.521201 ignition[855]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 46c9f489062bdb84574703f7339d140d7e42c9c71b367cd860071108a3c1d38fabda2ef69f9c0ff88f7c80e88d38f96ab2248d4c9a6c9c60b0a4c20fd640d0db Oct 2 18:44:49.523659 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 18:44:49.523659 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 18:44:49.523659 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubelet: attempt #1 Oct 2 18:44:49.599834 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 18:44:53.134782 ignition[855]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 0e4ee1f23bf768c49d09beb13a6b5fad6efc8e3e685e7c5610188763e3af55923fb46158b5e76973a0f9a055f9b30d525b467c53415f965536adc2f04d9cf18d Oct 2 18:44:53.145700 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 18:44:53.146877 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 18:44:53.146877 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubectl: attempt #1 Oct 2 18:44:53.267631 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 18:44:54.024333 ignition[855]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 3672fda0beebbbd636a2088f427463cbad32683ea4fbb1df61650552e63846b6a47db803ccb70c3db0a8f24746a23a5632bdc15a3fb78f4f7d833e7f86763c2a Oct 2 18:44:54.026750 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 18:44:54.026750 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 18:44:54.026750 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 18:44:54.026750 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/home/core/install.sh" Oct 2 18:44:54.032930 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 18:44:54.034394 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 18:44:54.034394 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 18:44:54.034394 ignition[855]: INFO : files: op(b): [started] processing unit "prepare-cni-plugins.service" Oct 2 18:44:54.034394 ignition[855]: INFO : files: op(b): op(c): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 18:44:54.034394 ignition[855]: INFO : files: op(b): op(c): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 18:44:54.034394 ignition[855]: INFO : files: op(b): [finished] processing unit "prepare-cni-plugins.service" Oct 2 18:44:54.034394 ignition[855]: INFO : files: op(d): [started] processing unit "prepare-critools.service" Oct 2 18:44:54.034394 ignition[855]: INFO : files: op(d): op(e): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 18:44:54.034394 ignition[855]: INFO : files: op(d): op(e): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 18:44:54.034394 ignition[855]: INFO : files: op(d): [finished] processing unit "prepare-critools.service" Oct 2 18:44:54.034394 ignition[855]: INFO : files: op(f): [started] processing unit "coreos-metadata.service" Oct 2 18:44:54.034394 ignition[855]: INFO : files: op(f): op(10): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 18:44:54.034394 ignition[855]: INFO : files: op(f): op(10): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 18:44:54.034394 ignition[855]: INFO : files: op(f): [finished] processing unit "coreos-metadata.service" Oct 2 18:44:54.034394 ignition[855]: INFO : files: op(11): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 18:44:54.034394 ignition[855]: INFO : files: op(11): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 18:44:54.034394 ignition[855]: INFO : files: op(12): [started] setting preset to enabled for "prepare-critools.service" Oct 2 18:44:54.034394 ignition[855]: INFO : files: op(12): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 18:44:54.034394 ignition[855]: INFO : files: op(13): [started] setting preset to disabled for "coreos-metadata.service" Oct 2 18:44:54.068656 ignition[855]: INFO : files: op(13): op(14): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 18:44:54.072221 ignition[855]: INFO : files: op(13): op(14): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 18:44:54.073431 ignition[855]: INFO : files: op(13): [finished] setting preset to disabled for "coreos-metadata.service" Oct 2 18:44:54.073431 ignition[855]: INFO : files: createResultFile: createFiles: op(15): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 18:44:54.073431 ignition[855]: INFO : files: createResultFile: createFiles: op(15): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 18:44:54.073431 ignition[855]: INFO : files: files passed Oct 2 18:44:54.073431 ignition[855]: INFO : Ignition finished successfully Oct 2 18:44:54.085668 kernel: kauditd_printk_skb: 21 callbacks suppressed Oct 2 18:44:54.085696 kernel: audit: type=1130 audit(1696272294.074:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.074000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.073916 systemd[1]: Finished ignition-files.service. Oct 2 18:44:54.076055 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 18:44:54.077169 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 18:44:54.088857 initrd-setup-root-after-ignition[879]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 2 18:44:54.077846 systemd[1]: Starting ignition-quench.service... Oct 2 18:44:54.092746 initrd-setup-root-after-ignition[882]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 18:44:54.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.094169 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 18:44:54.100013 kernel: audit: type=1130 audit(1696272294.094:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.100034 kernel: audit: type=1130 audit(1696272294.097:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.100051 kernel: audit: type=1131 audit(1696272294.099:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.097000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.099000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.096999 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 18:44:54.097074 systemd[1]: Finished ignition-quench.service. Oct 2 18:44:54.101612 systemd[1]: Reached target ignition-complete.target. Oct 2 18:44:54.103043 systemd[1]: Starting initrd-parse-etc.service... Oct 2 18:44:54.122702 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 18:44:54.122816 systemd[1]: Finished initrd-parse-etc.service. Oct 2 18:44:54.127889 kernel: audit: type=1130 audit(1696272294.123:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.127912 kernel: audit: type=1131 audit(1696272294.123:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.123000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.123000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.124268 systemd[1]: Reached target initrd-fs.target. Oct 2 18:44:54.128371 systemd[1]: Reached target initrd.target. Oct 2 18:44:54.129323 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 18:44:54.130175 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 18:44:54.142310 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 18:44:54.142000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.145714 kernel: audit: type=1130 audit(1696272294.142:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.145852 systemd[1]: Starting initrd-cleanup.service... Oct 2 18:44:54.155364 systemd[1]: Stopped target nss-lookup.target. Oct 2 18:44:54.156078 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 18:44:54.157240 systemd[1]: Stopped target timers.target. Oct 2 18:44:54.158152 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 18:44:54.158000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.158275 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 18:44:54.161870 kernel: audit: type=1131 audit(1696272294.158:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.161324 systemd[1]: Stopped target initrd.target. Oct 2 18:44:54.162434 systemd[1]: Stopped target basic.target. Oct 2 18:44:54.163407 systemd[1]: Stopped target ignition-complete.target. Oct 2 18:44:54.164528 systemd[1]: Stopped target ignition-diskful.target. Oct 2 18:44:54.165584 systemd[1]: Stopped target initrd-root-device.target. Oct 2 18:44:54.166587 systemd[1]: Stopped target remote-fs.target. Oct 2 18:44:54.167551 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 18:44:54.168483 systemd[1]: Stopped target sysinit.target. Oct 2 18:44:54.169472 systemd[1]: Stopped target local-fs.target. Oct 2 18:44:54.170599 systemd[1]: Stopped target local-fs-pre.target. Oct 2 18:44:54.171564 systemd[1]: Stopped target swap.target. Oct 2 18:44:54.172513 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 18:44:54.185226 kernel: audit: type=1131 audit(1696272294.173:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.173000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.172644 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 18:44:54.174595 systemd[1]: Stopped target cryptsetup.target. Oct 2 18:44:54.186000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.185763 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 18:44:54.185879 systemd[1]: Stopped dracut-initqueue.service. Oct 2 18:44:54.191319 kernel: audit: type=1131 audit(1696272294.186:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.189000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.186834 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 18:44:54.186933 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 18:44:54.189704 systemd[1]: Stopped target paths.target. Oct 2 18:44:54.190801 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 18:44:54.194499 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 18:44:54.195204 systemd[1]: Stopped target slices.target. Oct 2 18:44:54.196189 systemd[1]: Stopped target sockets.target. Oct 2 18:44:54.197057 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 18:44:54.197000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.197183 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 18:44:54.198133 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 18:44:54.198000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.198233 systemd[1]: Stopped ignition-files.service. Oct 2 18:44:54.202979 iscsid[746]: iscsid shutting down. Oct 2 18:44:54.200242 systemd[1]: Stopping ignition-mount.service... Oct 2 18:44:54.203000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.201093 systemd[1]: Stopping iscsid.service... Oct 2 18:44:54.203293 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 18:44:54.203431 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 18:44:54.205313 systemd[1]: Stopping sysroot-boot.service... Oct 2 18:44:54.208543 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 18:44:54.208720 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 18:44:54.209000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.210560 ignition[895]: INFO : Ignition 2.14.0 Oct 2 18:44:54.210560 ignition[895]: INFO : Stage: umount Oct 2 18:44:54.210560 ignition[895]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 18:44:54.210560 ignition[895]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 18:44:54.210560 ignition[895]: INFO : umount: umount passed Oct 2 18:44:54.210560 ignition[895]: INFO : Ignition finished successfully Oct 2 18:44:54.210000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.214000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.210163 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 18:44:54.210264 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 18:44:54.217000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.213061 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 18:44:54.213170 systemd[1]: Stopped iscsid.service. Oct 2 18:44:54.219000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.216150 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 18:44:54.220000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.216698 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 18:44:54.221000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.216777 systemd[1]: Stopped ignition-mount.service. Oct 2 18:44:54.217951 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 18:44:54.223000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.223000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.218026 systemd[1]: Closed iscsid.socket. Oct 2 18:44:54.224000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.218673 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 18:44:54.225000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.218714 systemd[1]: Stopped ignition-disks.service. Oct 2 18:44:54.219722 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 18:44:54.219760 systemd[1]: Stopped ignition-kargs.service. Oct 2 18:44:54.220604 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 18:44:54.228000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.220639 systemd[1]: Stopped ignition-setup.service. Oct 2 18:44:54.221705 systemd[1]: Stopping iscsiuio.service... Oct 2 18:44:54.223585 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 18:44:54.223669 systemd[1]: Finished initrd-cleanup.service. Oct 2 18:44:54.224424 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 18:44:54.224515 systemd[1]: Stopped iscsiuio.service. Oct 2 18:44:54.225338 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 18:44:54.225413 systemd[1]: Stopped sysroot-boot.service. Oct 2 18:44:54.226876 systemd[1]: Stopped target network.target. Oct 2 18:44:54.227537 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 18:44:54.227569 systemd[1]: Closed iscsiuio.socket. Oct 2 18:44:54.228508 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 18:44:54.228545 systemd[1]: Stopped initrd-setup-root.service. Oct 2 18:44:54.229790 systemd[1]: Stopping systemd-networkd.service... Oct 2 18:44:54.230688 systemd[1]: Stopping systemd-resolved.service... Oct 2 18:44:54.238000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.236545 systemd-networkd[739]: eth0: DHCPv6 lease lost Oct 2 18:44:54.238163 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 18:44:54.238264 systemd[1]: Stopped systemd-networkd.service. Oct 2 18:44:54.239262 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 18:44:54.242000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.239292 systemd[1]: Closed systemd-networkd.socket. Oct 2 18:44:54.243000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.240624 systemd[1]: Stopping network-cleanup.service... Oct 2 18:44:54.241706 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 18:44:54.245000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.241767 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 18:44:54.246000 audit: BPF prog-id=9 op=UNLOAD Oct 2 18:44:54.242835 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 18:44:54.242874 systemd[1]: Stopped systemd-sysctl.service. Oct 2 18:44:54.244598 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 18:44:54.248000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.244635 systemd[1]: Stopped systemd-modules-load.service. Oct 2 18:44:54.245771 systemd[1]: Stopping systemd-udevd.service... Oct 2 18:44:54.247976 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 18:44:54.251000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.248541 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 18:44:54.248638 systemd[1]: Stopped systemd-resolved.service. Oct 2 18:44:54.253000 audit: BPF prog-id=6 op=UNLOAD Oct 2 18:44:54.250910 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 18:44:54.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.251039 systemd[1]: Stopped systemd-udevd.service. Oct 2 18:44:54.255000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.251988 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 18:44:54.256000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.252022 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 18:44:54.253065 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 18:44:54.253093 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 18:44:54.254422 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 18:44:54.254478 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 18:44:54.255377 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 18:44:54.255412 systemd[1]: Stopped dracut-cmdline.service. Oct 2 18:44:54.256465 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 18:44:54.259000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.260000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.256504 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 18:44:54.258089 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 18:44:54.265000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.265000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.259079 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 18:44:54.259145 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 18:44:54.260612 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 18:44:54.260695 systemd[1]: Stopped network-cleanup.service. Oct 2 18:44:54.264533 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 18:44:54.264622 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 18:44:54.265730 systemd[1]: Reached target initrd-switch-root.target. Oct 2 18:44:54.267470 systemd[1]: Starting initrd-switch-root.service... Oct 2 18:44:54.274785 systemd[1]: Switching root. Oct 2 18:44:54.291887 systemd-journald[291]: Journal stopped Oct 2 18:44:56.367173 systemd-journald[291]: Received SIGTERM from PID 1 (systemd). Oct 2 18:44:56.367280 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 18:44:56.367301 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 18:44:56.367320 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 18:44:56.367331 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 18:44:56.367340 kernel: SELinux: policy capability open_perms=1 Oct 2 18:44:56.367351 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 18:44:56.367361 kernel: SELinux: policy capability always_check_network=0 Oct 2 18:44:56.367370 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 18:44:56.367379 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 18:44:56.367389 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 18:44:56.367398 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 18:44:56.367409 systemd[1]: Successfully loaded SELinux policy in 36.414ms. Oct 2 18:44:56.367467 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 7.214ms. Oct 2 18:44:56.367481 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 18:44:56.367493 systemd[1]: Detected virtualization kvm. Oct 2 18:44:56.367503 systemd[1]: Detected architecture arm64. Oct 2 18:44:56.367524 systemd[1]: Detected first boot. Oct 2 18:44:56.367536 systemd[1]: Initializing machine ID from VM UUID. Oct 2 18:44:56.367546 systemd[1]: Populated /etc with preset unit settings. Oct 2 18:44:56.367558 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 18:44:56.367570 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 18:44:56.367582 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 18:44:56.367593 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 18:44:56.367603 systemd[1]: Stopped initrd-switch-root.service. Oct 2 18:44:56.367614 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 18:44:56.367625 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 18:44:56.367636 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 18:44:56.367647 systemd[1]: Created slice system-getty.slice. Oct 2 18:44:56.367656 systemd[1]: Created slice system-modprobe.slice. Oct 2 18:44:56.367667 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 18:44:56.367677 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 18:44:56.367688 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 18:44:56.367699 systemd[1]: Created slice user.slice. Oct 2 18:44:56.367709 systemd[1]: Started systemd-ask-password-console.path. Oct 2 18:44:56.367720 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 18:44:56.367731 systemd[1]: Set up automount boot.automount. Oct 2 18:44:56.367742 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 18:44:56.367752 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 18:44:56.367762 systemd[1]: Stopped target initrd-fs.target. Oct 2 18:44:56.367772 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 18:44:56.367782 systemd[1]: Reached target integritysetup.target. Oct 2 18:44:56.367793 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 18:44:56.367804 systemd[1]: Reached target remote-fs.target. Oct 2 18:44:56.367815 systemd[1]: Reached target slices.target. Oct 2 18:44:56.367825 systemd[1]: Reached target swap.target. Oct 2 18:44:56.367835 systemd[1]: Reached target torcx.target. Oct 2 18:44:56.367846 systemd[1]: Reached target veritysetup.target. Oct 2 18:44:56.367856 systemd[1]: Listening on systemd-coredump.socket. Oct 2 18:44:56.367866 systemd[1]: Listening on systemd-initctl.socket. Oct 2 18:44:56.367877 systemd[1]: Listening on systemd-networkd.socket. Oct 2 18:44:56.367887 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 18:44:56.367898 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 18:44:56.367909 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 18:44:56.367919 systemd[1]: Mounting dev-hugepages.mount... Oct 2 18:44:56.367929 systemd[1]: Mounting dev-mqueue.mount... Oct 2 18:44:56.367940 systemd[1]: Mounting media.mount... Oct 2 18:44:56.367950 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 18:44:56.367960 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 18:44:56.367970 systemd[1]: Mounting tmp.mount... Oct 2 18:44:56.367980 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 18:44:56.367991 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 18:44:56.368003 systemd[1]: Starting kmod-static-nodes.service... Oct 2 18:44:56.368013 systemd[1]: Starting modprobe@configfs.service... Oct 2 18:44:56.368023 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 18:44:56.368033 systemd[1]: Starting modprobe@drm.service... Oct 2 18:44:56.368043 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 18:44:56.368054 systemd[1]: Starting modprobe@fuse.service... Oct 2 18:44:56.368064 systemd[1]: Starting modprobe@loop.service... Oct 2 18:44:56.368075 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 18:44:56.368085 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 18:44:56.368096 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 18:44:56.368106 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 18:44:56.368153 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 18:44:56.368165 systemd[1]: Stopped systemd-journald.service. Oct 2 18:44:56.368175 kernel: fuse: init (API version 7.34) Oct 2 18:44:56.368184 kernel: loop: module loaded Oct 2 18:44:56.368195 systemd[1]: Starting systemd-journald.service... Oct 2 18:44:56.368206 systemd[1]: Starting systemd-modules-load.service... Oct 2 18:44:56.368216 systemd[1]: Starting systemd-network-generator.service... Oct 2 18:44:56.368228 systemd[1]: Starting systemd-remount-fs.service... Oct 2 18:44:56.368238 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 18:44:56.368248 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 18:44:56.368259 systemd[1]: Stopped verity-setup.service. Oct 2 18:44:56.368268 systemd[1]: Mounted dev-hugepages.mount. Oct 2 18:44:56.368279 systemd[1]: Mounted dev-mqueue.mount. Oct 2 18:44:56.368289 systemd[1]: Mounted media.mount. Oct 2 18:44:56.368298 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 18:44:56.368308 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 18:44:56.368321 systemd[1]: Mounted tmp.mount. Oct 2 18:44:56.368331 systemd[1]: Finished kmod-static-nodes.service. Oct 2 18:44:56.368342 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 18:44:56.368352 systemd[1]: Finished modprobe@configfs.service. Oct 2 18:44:56.368362 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 18:44:56.368373 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 18:44:56.368383 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 18:44:56.368395 systemd[1]: Finished modprobe@drm.service. Oct 2 18:44:56.368405 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 18:44:56.368415 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 18:44:56.368428 systemd-journald[999]: Journal started Oct 2 18:44:56.368497 systemd-journald[999]: Runtime Journal (/run/log/journal/601bcfb1506d41d4899e9d938318f120) is 6.0M, max 48.7M, 42.6M free. Oct 2 18:44:54.369000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 18:44:54.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 18:44:54.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 18:44:54.493000 audit: BPF prog-id=10 op=LOAD Oct 2 18:44:54.493000 audit: BPF prog-id=10 op=UNLOAD Oct 2 18:44:54.493000 audit: BPF prog-id=11 op=LOAD Oct 2 18:44:54.493000 audit: BPF prog-id=11 op=UNLOAD Oct 2 18:44:56.253000 audit: BPF prog-id=12 op=LOAD Oct 2 18:44:56.253000 audit: BPF prog-id=3 op=UNLOAD Oct 2 18:44:56.253000 audit: BPF prog-id=13 op=LOAD Oct 2 18:44:56.253000 audit: BPF prog-id=14 op=LOAD Oct 2 18:44:56.253000 audit: BPF prog-id=4 op=UNLOAD Oct 2 18:44:56.253000 audit: BPF prog-id=5 op=UNLOAD Oct 2 18:44:56.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.256000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.262000 audit: BPF prog-id=12 op=UNLOAD Oct 2 18:44:56.329000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.331000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.332000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.332000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.335000 audit: BPF prog-id=15 op=LOAD Oct 2 18:44:56.335000 audit: BPF prog-id=16 op=LOAD Oct 2 18:44:56.335000 audit: BPF prog-id=17 op=LOAD Oct 2 18:44:56.335000 audit: BPF prog-id=13 op=UNLOAD Oct 2 18:44:56.335000 audit: BPF prog-id=14 op=UNLOAD Oct 2 18:44:56.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.361000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.361000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.363000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.363000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.365000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 18:44:56.365000 audit[999]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=6 a1=ffffc00690d0 a2=4000 a3=1 items=0 ppid=1 pid=999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:44:56.365000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 18:44:56.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.368000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.368000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.251809 systemd[1]: Queued start job for default target multi-user.target. Oct 2 18:44:54.557417 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T18:44:54Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 18:44:56.251821 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 18:44:54.557997 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T18:44:54Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 18:44:56.254414 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 18:44:54.558016 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T18:44:54Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 18:44:56.369731 systemd[1]: Started systemd-journald.service. Oct 2 18:44:54.558047 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T18:44:54Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 18:44:56.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:54.558056 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T18:44:54Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 18:44:54.558086 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T18:44:54Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 18:44:54.558097 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T18:44:54Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 18:44:54.558303 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T18:44:54Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 18:44:54.558338 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T18:44:54Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 18:44:56.370158 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 18:44:54.558349 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T18:44:54Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 18:44:54.558860 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T18:44:54Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 18:44:56.370302 systemd[1]: Finished modprobe@fuse.service. Oct 2 18:44:54.558898 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T18:44:54Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 18:44:54.558917 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T18:44:54Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 18:44:54.558931 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T18:44:54Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 18:44:54.558948 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T18:44:54Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 18:44:54.558961 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T18:44:54Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 18:44:55.990952 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T18:44:55Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 18:44:55.991226 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T18:44:55Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 18:44:56.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.370000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:55.991327 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T18:44:55Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 18:44:55.991492 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T18:44:55Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 18:44:55.991540 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T18:44:55Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 18:44:55.991593 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T18:44:55Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 18:44:56.371360 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 18:44:56.371517 systemd[1]: Finished modprobe@loop.service. Oct 2 18:44:56.371000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.371000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.372353 systemd[1]: Finished systemd-modules-load.service. Oct 2 18:44:56.372000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.373327 systemd[1]: Finished systemd-network-generator.service. Oct 2 18:44:56.373000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.374403 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 18:44:56.374000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.375307 systemd[1]: Finished systemd-remount-fs.service. Oct 2 18:44:56.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.376540 systemd[1]: Reached target network-pre.target. Oct 2 18:44:56.378202 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 18:44:56.379899 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 18:44:56.380619 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 18:44:56.382674 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 18:44:56.384533 systemd[1]: Starting systemd-journal-flush.service... Oct 2 18:44:56.385225 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 18:44:56.386551 systemd[1]: Starting systemd-random-seed.service... Oct 2 18:44:56.387256 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 18:44:56.388435 systemd[1]: Starting systemd-sysctl.service... Oct 2 18:44:56.393227 systemd-journald[999]: Time spent on flushing to /var/log/journal/601bcfb1506d41d4899e9d938318f120 is 22.073ms for 981 entries. Oct 2 18:44:56.393227 systemd-journald[999]: System Journal (/var/log/journal/601bcfb1506d41d4899e9d938318f120) is 8.0M, max 195.6M, 187.6M free. Oct 2 18:44:56.425148 systemd-journald[999]: Received client request to flush runtime journal. Oct 2 18:44:56.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.419000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.395169 systemd[1]: Starting systemd-sysusers.service... Oct 2 18:44:56.399905 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 18:44:56.400907 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 18:44:56.425863 udevadm[1030]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 18:44:56.403476 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 18:44:56.407874 systemd[1]: Finished systemd-random-seed.service. Oct 2 18:44:56.408696 systemd[1]: Finished systemd-sysctl.service. Oct 2 18:44:56.409357 systemd[1]: Reached target first-boot-complete.target. Oct 2 18:44:56.410990 systemd[1]: Starting systemd-udev-settle.service... Oct 2 18:44:56.418932 systemd[1]: Finished systemd-sysusers.service. Oct 2 18:44:56.426008 systemd[1]: Finished systemd-journal-flush.service. Oct 2 18:44:56.426000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.793687 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 18:44:56.794000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.794000 audit: BPF prog-id=18 op=LOAD Oct 2 18:44:56.794000 audit: BPF prog-id=19 op=LOAD Oct 2 18:44:56.794000 audit: BPF prog-id=7 op=UNLOAD Oct 2 18:44:56.794000 audit: BPF prog-id=8 op=UNLOAD Oct 2 18:44:56.796033 systemd[1]: Starting systemd-udevd.service... Oct 2 18:44:56.814745 systemd-udevd[1032]: Using default interface naming scheme 'v252'. Oct 2 18:44:56.829075 systemd[1]: Started systemd-udevd.service. Oct 2 18:44:56.829000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.830000 audit: BPF prog-id=20 op=LOAD Oct 2 18:44:56.833635 systemd[1]: Starting systemd-networkd.service... Oct 2 18:44:56.842000 audit: BPF prog-id=21 op=LOAD Oct 2 18:44:56.842000 audit: BPF prog-id=22 op=LOAD Oct 2 18:44:56.842000 audit: BPF prog-id=23 op=LOAD Oct 2 18:44:56.843902 systemd[1]: Starting systemd-userdbd.service... Oct 2 18:44:56.860302 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Oct 2 18:44:56.885480 systemd[1]: Started systemd-userdbd.service. Oct 2 18:44:56.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.896187 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 18:44:56.943827 systemd[1]: Finished systemd-udev-settle.service. Oct 2 18:44:56.944000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.946545 systemd[1]: Starting lvm2-activation-early.service... Oct 2 18:44:56.948078 systemd-networkd[1040]: lo: Link UP Oct 2 18:44:56.948087 systemd-networkd[1040]: lo: Gained carrier Oct 2 18:44:56.948462 systemd-networkd[1040]: Enumeration completed Oct 2 18:44:56.948567 systemd[1]: Started systemd-networkd.service. Oct 2 18:44:56.948568 systemd-networkd[1040]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 18:44:56.948000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.953225 systemd-networkd[1040]: eth0: Link UP Oct 2 18:44:56.953235 systemd-networkd[1040]: eth0: Gained carrier Oct 2 18:44:56.958562 lvm[1065]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 18:44:56.977570 systemd-networkd[1040]: eth0: DHCPv4 address 10.0.0.18/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 18:44:56.991387 systemd[1]: Finished lvm2-activation-early.service. Oct 2 18:44:56.992000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:56.992381 systemd[1]: Reached target cryptsetup.target. Oct 2 18:44:56.994158 systemd[1]: Starting lvm2-activation.service... Oct 2 18:44:56.998343 lvm[1066]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 18:44:57.032397 systemd[1]: Finished lvm2-activation.service. Oct 2 18:44:57.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:57.033380 systemd[1]: Reached target local-fs-pre.target. Oct 2 18:44:57.034023 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 18:44:57.034054 systemd[1]: Reached target local-fs.target. Oct 2 18:44:57.034638 systemd[1]: Reached target machines.target. Oct 2 18:44:57.036412 systemd[1]: Starting ldconfig.service... Oct 2 18:44:57.037405 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 18:44:57.037486 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 18:44:57.039033 systemd[1]: Starting systemd-boot-update.service... Oct 2 18:44:57.041578 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 18:44:57.043819 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 18:44:57.044936 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 18:44:57.045119 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 18:44:57.046924 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 18:44:57.052132 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1068 (bootctl) Oct 2 18:44:57.054205 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 18:44:57.056000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:57.055272 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 18:44:57.077785 systemd-tmpfiles[1071]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 18:44:57.092859 systemd-tmpfiles[1071]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 18:44:57.099006 systemd-tmpfiles[1071]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 18:44:57.105986 systemd-fsck[1078]: fsck.fat 4.2 (2021-01-31) Oct 2 18:44:57.105986 systemd-fsck[1078]: /dev/vda1: 236 files, 113463/258078 clusters Oct 2 18:44:57.108093 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 18:44:57.109000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:57.112882 systemd[1]: Mounting boot.mount... Oct 2 18:44:57.133152 systemd[1]: Mounted boot.mount. Oct 2 18:44:57.389639 systemd[1]: Finished systemd-boot-update.service. Oct 2 18:44:57.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:57.405384 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 18:44:57.406755 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 18:44:57.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:57.464580 ldconfig[1067]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 18:44:57.469681 systemd[1]: Finished ldconfig.service. Oct 2 18:44:57.469000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:57.485625 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 18:44:57.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:57.487637 systemd[1]: Starting audit-rules.service... Oct 2 18:44:57.489378 systemd[1]: Starting clean-ca-certificates.service... Oct 2 18:44:57.491649 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 18:44:57.493000 audit: BPF prog-id=24 op=LOAD Oct 2 18:44:57.494398 systemd[1]: Starting systemd-resolved.service... Oct 2 18:44:57.495000 audit: BPF prog-id=25 op=LOAD Oct 2 18:44:57.496621 systemd[1]: Starting systemd-timesyncd.service... Oct 2 18:44:57.499023 systemd[1]: Starting systemd-update-utmp.service... Oct 2 18:44:57.500651 systemd[1]: Finished clean-ca-certificates.service. Oct 2 18:44:57.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:57.502539 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 18:44:57.505000 audit[1089]: SYSTEM_BOOT pid=1089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 18:44:57.511000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:57.510656 systemd[1]: Finished systemd-update-utmp.service. Oct 2 18:44:57.523786 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 18:44:57.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:57.526279 systemd[1]: Starting systemd-update-done.service... Oct 2 18:44:57.533837 systemd[1]: Finished systemd-update-done.service. Oct 2 18:44:57.534000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:57.544000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:44:57.544375 systemd[1]: Started systemd-timesyncd.service. Oct 2 18:44:57.545047 systemd-timesyncd[1086]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 2 18:44:57.545090 systemd-timesyncd[1086]: Initial clock synchronization to Mon 2023-10-02 18:44:57.564627 UTC. Oct 2 18:44:57.545505 systemd[1]: Reached target time-set.target. Oct 2 18:44:57.548000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 18:44:57.548000 audit[1102]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd2b88860 a2=420 a3=0 items=0 ppid=1081 pid=1102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:44:57.548000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 18:44:57.548866 augenrules[1102]: No rules Oct 2 18:44:57.549436 systemd[1]: Finished audit-rules.service. Oct 2 18:44:57.553397 systemd-resolved[1085]: Positive Trust Anchors: Oct 2 18:44:57.553409 systemd-resolved[1085]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 18:44:57.553434 systemd-resolved[1085]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 18:44:57.564441 systemd-resolved[1085]: Defaulting to hostname 'linux'. Oct 2 18:44:57.565877 systemd[1]: Started systemd-resolved.service. Oct 2 18:44:57.566762 systemd[1]: Reached target network.target. Oct 2 18:44:57.567291 systemd[1]: Reached target nss-lookup.target. Oct 2 18:44:57.568087 systemd[1]: Reached target sysinit.target. Oct 2 18:44:57.568862 systemd[1]: Started motdgen.path. Oct 2 18:44:57.569381 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 18:44:57.570336 systemd[1]: Started logrotate.timer. Oct 2 18:44:57.570972 systemd[1]: Started mdadm.timer. Oct 2 18:44:57.571770 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 18:44:57.572400 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 18:44:57.572428 systemd[1]: Reached target paths.target. Oct 2 18:44:57.572946 systemd[1]: Reached target timers.target. Oct 2 18:44:57.574032 systemd[1]: Listening on dbus.socket. Oct 2 18:44:57.575619 systemd[1]: Starting docker.socket... Oct 2 18:44:57.578686 systemd[1]: Listening on sshd.socket. Oct 2 18:44:57.579309 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 18:44:57.579730 systemd[1]: Listening on docker.socket. Oct 2 18:44:57.580330 systemd[1]: Reached target sockets.target. Oct 2 18:44:57.580920 systemd[1]: Reached target basic.target. Oct 2 18:44:57.581460 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 18:44:57.581484 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 18:44:57.582402 systemd[1]: Starting containerd.service... Oct 2 18:44:57.583919 systemd[1]: Starting dbus.service... Oct 2 18:44:57.585873 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 18:44:57.587772 systemd[1]: Starting extend-filesystems.service... Oct 2 18:44:57.588481 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 18:44:57.589539 systemd[1]: Starting motdgen.service... Oct 2 18:44:57.591197 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 18:44:57.594890 systemd[1]: Starting prepare-critools.service... Oct 2 18:44:57.598503 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 18:44:57.598682 jq[1112]: false Oct 2 18:44:57.602376 systemd[1]: Starting sshd-keygen.service... Oct 2 18:44:57.607094 systemd[1]: Starting systemd-logind.service... Oct 2 18:44:57.607764 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 18:44:57.607827 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 18:44:57.608271 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 18:44:57.609092 systemd[1]: Starting update-engine.service... Oct 2 18:44:57.609704 extend-filesystems[1113]: Found vda Oct 2 18:44:57.610548 extend-filesystems[1113]: Found vda1 Oct 2 18:44:57.610548 extend-filesystems[1113]: Found vda2 Oct 2 18:44:57.610548 extend-filesystems[1113]: Found vda3 Oct 2 18:44:57.610548 extend-filesystems[1113]: Found usr Oct 2 18:44:57.610548 extend-filesystems[1113]: Found vda4 Oct 2 18:44:57.610548 extend-filesystems[1113]: Found vda6 Oct 2 18:44:57.610548 extend-filesystems[1113]: Found vda7 Oct 2 18:44:57.610548 extend-filesystems[1113]: Found vda9 Oct 2 18:44:57.610548 extend-filesystems[1113]: Checking size of /dev/vda9 Oct 2 18:44:57.612557 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 18:44:57.616848 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 18:44:57.637950 jq[1132]: true Oct 2 18:44:57.617005 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 18:44:57.618584 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 18:44:57.638295 tar[1137]: crictl Oct 2 18:44:57.618745 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 18:44:57.639876 tar[1136]: ./ Oct 2 18:44:57.639876 tar[1136]: ./macvlan Oct 2 18:44:57.640362 jq[1138]: true Oct 2 18:44:57.641239 systemd[1]: Started dbus.service. Oct 2 18:44:57.641088 dbus-daemon[1111]: [system] SELinux support is enabled Oct 2 18:44:57.644295 extend-filesystems[1113]: Old size kept for /dev/vda9 Oct 2 18:44:57.644727 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 18:44:57.644757 systemd[1]: Reached target system-config.target. Oct 2 18:44:57.646061 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 18:44:57.646084 systemd[1]: Reached target user-config.target. Oct 2 18:44:57.647114 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 18:44:57.647272 systemd[1]: Finished extend-filesystems.service. Oct 2 18:44:57.648169 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 18:44:57.648296 systemd[1]: Finished motdgen.service. Oct 2 18:44:57.701471 bash[1159]: Updated "/home/core/.ssh/authorized_keys" Oct 2 18:44:57.700322 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 18:44:57.701607 systemd-logind[1125]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 18:44:57.701813 systemd-logind[1125]: New seat seat0. Oct 2 18:44:57.703594 update_engine[1130]: I1002 18:44:57.703380 1130 main.cc:92] Flatcar Update Engine starting Oct 2 18:44:57.703648 systemd[1]: Started systemd-logind.service. Oct 2 18:44:57.712898 tar[1136]: ./static Oct 2 18:44:57.719720 systemd[1]: Started update-engine.service. Oct 2 18:44:57.719962 update_engine[1130]: I1002 18:44:57.719944 1130 update_check_scheduler.cc:74] Next update check in 11m43s Oct 2 18:44:57.721949 systemd[1]: Started locksmithd.service. Oct 2 18:44:57.742421 tar[1136]: ./vlan Oct 2 18:44:57.785906 tar[1136]: ./portmap Oct 2 18:44:57.815946 env[1139]: time="2023-10-02T18:44:57.815899600Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 18:44:57.820875 tar[1136]: ./host-local Oct 2 18:44:57.842999 tar[1136]: ./vrf Oct 2 18:44:57.848171 systemd[1]: Created slice system-sshd.slice. Oct 2 18:44:57.855708 env[1139]: time="2023-10-02T18:44:57.855664880Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 18:44:57.856220 env[1139]: time="2023-10-02T18:44:57.856138280Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 18:44:57.859777 locksmithd[1164]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 18:44:57.863652 env[1139]: time="2023-10-02T18:44:57.863615520Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 18:44:57.863652 env[1139]: time="2023-10-02T18:44:57.863650440Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 18:44:57.863912 env[1139]: time="2023-10-02T18:44:57.863890440Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 18:44:57.863912 env[1139]: time="2023-10-02T18:44:57.863911360Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 18:44:57.863992 env[1139]: time="2023-10-02T18:44:57.863924720Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 18:44:57.863992 env[1139]: time="2023-10-02T18:44:57.863934000Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 18:44:57.864031 env[1139]: time="2023-10-02T18:44:57.864012640Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 18:44:57.864348 env[1139]: time="2023-10-02T18:44:57.864327920Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 18:44:57.864492 env[1139]: time="2023-10-02T18:44:57.864465600Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 18:44:57.864492 env[1139]: time="2023-10-02T18:44:57.864485160Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 18:44:57.864560 env[1139]: time="2023-10-02T18:44:57.864543600Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 18:44:57.864560 env[1139]: time="2023-10-02T18:44:57.864555840Z" level=info msg="metadata content store policy set" policy=shared Oct 2 18:44:57.869156 tar[1136]: ./bridge Oct 2 18:44:57.873115 env[1139]: time="2023-10-02T18:44:57.873076240Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 18:44:57.873191 env[1139]: time="2023-10-02T18:44:57.873130040Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 18:44:57.873191 env[1139]: time="2023-10-02T18:44:57.873147880Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 18:44:57.873191 env[1139]: time="2023-10-02T18:44:57.873181880Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 18:44:57.873253 env[1139]: time="2023-10-02T18:44:57.873197840Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 18:44:57.873253 env[1139]: time="2023-10-02T18:44:57.873211360Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 18:44:57.873253 env[1139]: time="2023-10-02T18:44:57.873224400Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 18:44:57.873608 env[1139]: time="2023-10-02T18:44:57.873585080Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 18:44:57.873647 env[1139]: time="2023-10-02T18:44:57.873609960Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 18:44:57.873647 env[1139]: time="2023-10-02T18:44:57.873623440Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 18:44:57.873647 env[1139]: time="2023-10-02T18:44:57.873635480Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 18:44:57.873718 env[1139]: time="2023-10-02T18:44:57.873648680Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 18:44:57.873797 env[1139]: time="2023-10-02T18:44:57.873775960Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 18:44:57.873874 env[1139]: time="2023-10-02T18:44:57.873856480Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 18:44:57.874095 env[1139]: time="2023-10-02T18:44:57.874064840Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 18:44:57.874095 env[1139]: time="2023-10-02T18:44:57.874091320Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 18:44:57.874176 env[1139]: time="2023-10-02T18:44:57.874132080Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 18:44:57.874264 env[1139]: time="2023-10-02T18:44:57.874249440Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 18:44:57.874305 env[1139]: time="2023-10-02T18:44:57.874267320Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 18:44:57.874305 env[1139]: time="2023-10-02T18:44:57.874279040Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 18:44:57.874305 env[1139]: time="2023-10-02T18:44:57.874290320Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 18:44:57.874305 env[1139]: time="2023-10-02T18:44:57.874301040Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 18:44:57.874394 env[1139]: time="2023-10-02T18:44:57.874312760Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 18:44:57.874394 env[1139]: time="2023-10-02T18:44:57.874323600Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 18:44:57.874394 env[1139]: time="2023-10-02T18:44:57.874335400Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 18:44:57.874394 env[1139]: time="2023-10-02T18:44:57.874347840Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 18:44:57.874597 env[1139]: time="2023-10-02T18:44:57.874504320Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 18:44:57.874597 env[1139]: time="2023-10-02T18:44:57.874532960Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 18:44:57.874597 env[1139]: time="2023-10-02T18:44:57.874545640Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 18:44:57.874597 env[1139]: time="2023-10-02T18:44:57.874558520Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 18:44:57.874597 env[1139]: time="2023-10-02T18:44:57.874571840Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 18:44:57.874597 env[1139]: time="2023-10-02T18:44:57.874582600Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 18:44:57.874597 env[1139]: time="2023-10-02T18:44:57.874598280Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 18:44:57.874746 env[1139]: time="2023-10-02T18:44:57.874632880Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 18:44:57.874880 env[1139]: time="2023-10-02T18:44:57.874827280Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 18:44:57.877301 env[1139]: time="2023-10-02T18:44:57.874886840Z" level=info msg="Connect containerd service" Oct 2 18:44:57.877301 env[1139]: time="2023-10-02T18:44:57.874916600Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 18:44:57.877301 env[1139]: time="2023-10-02T18:44:57.875866960Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 18:44:57.877851 env[1139]: time="2023-10-02T18:44:57.877510680Z" level=info msg="Start subscribing containerd event" Oct 2 18:44:57.877851 env[1139]: time="2023-10-02T18:44:57.877574760Z" level=info msg="Start recovering state" Oct 2 18:44:57.877851 env[1139]: time="2023-10-02T18:44:57.877634680Z" level=info msg="Start event monitor" Oct 2 18:44:57.877851 env[1139]: time="2023-10-02T18:44:57.877636280Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 18:44:57.877851 env[1139]: time="2023-10-02T18:44:57.877666720Z" level=info msg="Start snapshots syncer" Oct 2 18:44:57.877851 env[1139]: time="2023-10-02T18:44:57.877677440Z" level=info msg="Start cni network conf syncer for default" Oct 2 18:44:57.877851 env[1139]: time="2023-10-02T18:44:57.877685040Z" level=info msg="Start streaming server" Oct 2 18:44:57.877851 env[1139]: time="2023-10-02T18:44:57.877694720Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 18:44:57.877851 env[1139]: time="2023-10-02T18:44:57.877753200Z" level=info msg="containerd successfully booted in 0.062564s" Oct 2 18:44:57.877830 systemd[1]: Started containerd.service. Oct 2 18:44:57.904881 tar[1136]: ./tuning Oct 2 18:44:57.928453 tar[1136]: ./firewall Oct 2 18:44:57.958129 tar[1136]: ./host-device Oct 2 18:44:57.984642 tar[1136]: ./sbr Oct 2 18:44:58.009163 tar[1136]: ./loopback Oct 2 18:44:58.032359 tar[1136]: ./dhcp Oct 2 18:44:58.062838 systemd[1]: Finished prepare-critools.service. Oct 2 18:44:58.097998 tar[1136]: ./ptp Oct 2 18:44:58.126349 tar[1136]: ./ipvlan Oct 2 18:44:58.153775 tar[1136]: ./bandwidth Oct 2 18:44:58.189179 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 18:44:58.633781 systemd-networkd[1040]: eth0: Gained IPv6LL Oct 2 18:44:59.730797 sshd_keygen[1134]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 18:44:59.750978 systemd[1]: Finished sshd-keygen.service. Oct 2 18:44:59.753043 systemd[1]: Starting issuegen.service... Oct 2 18:44:59.754571 systemd[1]: Started sshd@0-10.0.0.18:22-10.0.0.1:47464.service. Oct 2 18:44:59.758780 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 18:44:59.758927 systemd[1]: Finished issuegen.service. Oct 2 18:44:59.760785 systemd[1]: Starting systemd-user-sessions.service... Oct 2 18:44:59.767970 systemd[1]: Finished systemd-user-sessions.service. Oct 2 18:44:59.770083 systemd[1]: Started getty@tty1.service. Oct 2 18:44:59.771991 systemd[1]: Started serial-getty@ttyAMA0.service. Oct 2 18:44:59.772880 systemd[1]: Reached target getty.target. Oct 2 18:44:59.773529 systemd[1]: Reached target multi-user.target. Oct 2 18:44:59.775314 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 18:44:59.782869 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 18:44:59.783018 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 18:44:59.783808 systemd[1]: Startup finished in 627ms (kernel) + 9.749s (initrd) + 5.460s (userspace) = 15.837s. Oct 2 18:44:59.816356 sshd[1187]: Accepted publickey for core from 10.0.0.1 port 47464 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 18:44:59.818587 sshd[1187]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:44:59.827012 systemd[1]: Created slice user-500.slice. Oct 2 18:44:59.828149 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 18:44:59.829844 systemd-logind[1125]: New session 1 of user core. Oct 2 18:44:59.838807 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 18:44:59.840210 systemd[1]: Starting user@500.service... Oct 2 18:44:59.843584 (systemd)[1197]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:44:59.911113 systemd[1197]: Queued start job for default target default.target. Oct 2 18:44:59.911637 systemd[1197]: Reached target paths.target. Oct 2 18:44:59.911657 systemd[1197]: Reached target sockets.target. Oct 2 18:44:59.911669 systemd[1197]: Reached target timers.target. Oct 2 18:44:59.911683 systemd[1197]: Reached target basic.target. Oct 2 18:44:59.911734 systemd[1197]: Reached target default.target. Oct 2 18:44:59.911759 systemd[1197]: Startup finished in 61ms. Oct 2 18:44:59.912097 systemd[1]: Started user@500.service. Oct 2 18:44:59.913085 systemd[1]: Started session-1.scope. Oct 2 18:44:59.963312 systemd[1]: Started sshd@1-10.0.0.18:22-10.0.0.1:47476.service. Oct 2 18:45:00.020941 sshd[1206]: Accepted publickey for core from 10.0.0.1 port 47476 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 18:45:00.022331 sshd[1206]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:45:00.028210 systemd-logind[1125]: New session 2 of user core. Oct 2 18:45:00.028641 systemd[1]: Started session-2.scope. Oct 2 18:45:00.089822 sshd[1206]: pam_unix(sshd:session): session closed for user core Oct 2 18:45:00.093783 systemd[1]: sshd@1-10.0.0.18:22-10.0.0.1:47476.service: Deactivated successfully. Oct 2 18:45:00.094372 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 18:45:00.094948 systemd-logind[1125]: Session 2 logged out. Waiting for processes to exit. Oct 2 18:45:00.096296 systemd[1]: Started sshd@2-10.0.0.18:22-10.0.0.1:47490.service. Oct 2 18:45:00.096933 systemd-logind[1125]: Removed session 2. Oct 2 18:45:00.140343 sshd[1212]: Accepted publickey for core from 10.0.0.1 port 47490 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 18:45:00.142017 sshd[1212]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:45:00.147632 systemd-logind[1125]: New session 3 of user core. Oct 2 18:45:00.148398 systemd[1]: Started session-3.scope. Oct 2 18:45:00.204230 sshd[1212]: pam_unix(sshd:session): session closed for user core Oct 2 18:45:00.207686 systemd[1]: sshd@2-10.0.0.18:22-10.0.0.1:47490.service: Deactivated successfully. Oct 2 18:45:00.208253 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 18:45:00.209903 systemd[1]: Started sshd@3-10.0.0.18:22-10.0.0.1:47500.service. Oct 2 18:45:00.210298 systemd-logind[1125]: Session 3 logged out. Waiting for processes to exit. Oct 2 18:45:00.212228 systemd-logind[1125]: Removed session 3. Oct 2 18:45:00.257143 sshd[1218]: Accepted publickey for core from 10.0.0.1 port 47500 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 18:45:00.258955 sshd[1218]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:45:00.265244 systemd-logind[1125]: New session 4 of user core. Oct 2 18:45:00.266112 systemd[1]: Started session-4.scope. Oct 2 18:45:00.329776 sshd[1218]: pam_unix(sshd:session): session closed for user core Oct 2 18:45:00.334943 systemd[1]: sshd@3-10.0.0.18:22-10.0.0.1:47500.service: Deactivated successfully. Oct 2 18:45:00.335808 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 18:45:00.336666 systemd-logind[1125]: Session 4 logged out. Waiting for processes to exit. Oct 2 18:45:00.338217 systemd[1]: Started sshd@4-10.0.0.18:22-10.0.0.1:47504.service. Oct 2 18:45:00.339324 systemd-logind[1125]: Removed session 4. Oct 2 18:45:00.392796 sshd[1224]: Accepted publickey for core from 10.0.0.1 port 47504 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 18:45:00.394649 sshd[1224]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:45:00.398560 systemd-logind[1125]: New session 5 of user core. Oct 2 18:45:00.400773 systemd[1]: Started session-5.scope. Oct 2 18:45:00.464095 sudo[1227]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 18:45:00.464303 sudo[1227]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 18:45:00.476640 dbus-daemon[1111]: avc: received setenforce notice (enforcing=1) Oct 2 18:45:00.478497 sudo[1227]: pam_unix(sudo:session): session closed for user root Oct 2 18:45:00.480594 sshd[1224]: pam_unix(sshd:session): session closed for user core Oct 2 18:45:00.484681 systemd[1]: sshd@4-10.0.0.18:22-10.0.0.1:47504.service: Deactivated successfully. Oct 2 18:45:00.485289 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 18:45:00.486010 systemd-logind[1125]: Session 5 logged out. Waiting for processes to exit. Oct 2 18:45:00.486971 systemd[1]: Started sshd@5-10.0.0.18:22-10.0.0.1:47516.service. Oct 2 18:45:00.497366 systemd-logind[1125]: Removed session 5. Oct 2 18:45:00.541133 sshd[1231]: Accepted publickey for core from 10.0.0.1 port 47516 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 18:45:00.541081 sshd[1231]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:45:00.545537 systemd-logind[1125]: New session 6 of user core. Oct 2 18:45:00.546325 systemd[1]: Started session-6.scope. Oct 2 18:45:00.600202 sudo[1235]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 18:45:00.600895 sudo[1235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 18:45:00.604904 sudo[1235]: pam_unix(sudo:session): session closed for user root Oct 2 18:45:00.609527 sudo[1234]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 18:45:00.609723 sudo[1234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 18:45:00.619000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 18:45:00.618526 systemd[1]: Stopping audit-rules.service... Oct 2 18:45:00.620203 auditctl[1238]: No rules Oct 2 18:45:00.620521 kernel: kauditd_printk_skb: 116 callbacks suppressed Oct 2 18:45:00.620581 kernel: audit: type=1305 audit(1696272300.619:154): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 18:45:00.620862 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 18:45:00.621017 systemd[1]: Stopped audit-rules.service. Oct 2 18:45:00.619000 audit[1238]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd7c70060 a2=420 a3=0 items=0 ppid=1 pid=1238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:00.624440 kernel: audit: type=1300 audit(1696272300.619:154): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd7c70060 a2=420 a3=0 items=0 ppid=1 pid=1238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:00.624502 kernel: audit: type=1327 audit(1696272300.619:154): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 18:45:00.619000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 18:45:00.625268 kernel: audit: type=1131 audit(1696272300.620:155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:00.620000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:00.641458 systemd[1]: Starting audit-rules.service... Oct 2 18:45:00.666477 augenrules[1255]: No rules Oct 2 18:45:00.666000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:00.667100 systemd[1]: Finished audit-rules.service. Oct 2 18:45:00.669468 kernel: audit: type=1130 audit(1696272300.666:156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:00.669466 sudo[1234]: pam_unix(sudo:session): session closed for user root Oct 2 18:45:00.669000 audit[1234]: USER_END pid=1234 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:45:00.672209 sshd[1231]: pam_unix(sshd:session): session closed for user core Oct 2 18:45:00.669000 audit[1234]: CRED_DISP pid=1234 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:45:00.676345 kernel: audit: type=1106 audit(1696272300.669:157): pid=1234 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:45:00.676442 kernel: audit: type=1104 audit(1696272300.669:158): pid=1234 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:45:00.676609 kernel: audit: type=1106 audit(1696272300.672:159): pid=1231 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:45:00.672000 audit[1231]: USER_END pid=1231 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:45:00.674691 systemd[1]: sshd@5-10.0.0.18:22-10.0.0.1:47516.service: Deactivated successfully. Oct 2 18:45:00.675214 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 18:45:00.677281 kernel: audit: type=1104 audit(1696272300.673:160): pid=1231 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:45:00.673000 audit[1231]: CRED_DISP pid=1231 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:45:00.675971 systemd-logind[1125]: Session 6 logged out. Waiting for processes to exit. Oct 2 18:45:00.676882 systemd[1]: Started sshd@6-10.0.0.18:22-10.0.0.1:47528.service. Oct 2 18:45:00.678847 systemd-logind[1125]: Removed session 6. Oct 2 18:45:00.679340 kernel: audit: type=1131 audit(1696272300.674:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.18:22-10.0.0.1:47516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:00.674000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.18:22-10.0.0.1:47516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:00.676000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.18:22-10.0.0.1:47528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:00.722000 audit[1261]: USER_ACCT pid=1261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:45:00.723466 sshd[1261]: Accepted publickey for core from 10.0.0.1 port 47528 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 18:45:00.724000 audit[1261]: CRED_ACQ pid=1261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:45:00.724000 audit[1261]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeab45090 a2=3 a3=1 items=0 ppid=1 pid=1261 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:00.724000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:45:00.725054 sshd[1261]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:45:00.735873 systemd-logind[1125]: New session 7 of user core. Oct 2 18:45:00.736342 systemd[1]: Started session-7.scope. Oct 2 18:45:00.742000 audit[1261]: USER_START pid=1261 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:45:00.743000 audit[1263]: CRED_ACQ pid=1263 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:45:00.792000 audit[1264]: USER_ACCT pid=1264 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:45:00.792945 sudo[1264]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 18:45:00.793167 sudo[1264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 18:45:00.792000 audit[1264]: CRED_REFR pid=1264 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:45:00.794000 audit[1264]: USER_START pid=1264 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:45:01.635378 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 18:45:01.642123 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 18:45:01.642459 systemd[1]: Reached target network-online.target. Oct 2 18:45:01.641000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:01.643751 systemd[1]: Starting docker.service... Oct 2 18:45:01.728985 env[1281]: time="2023-10-02T18:45:01.728925952Z" level=info msg="Starting up" Oct 2 18:45:01.730733 env[1281]: time="2023-10-02T18:45:01.730701427Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 18:45:01.730826 env[1281]: time="2023-10-02T18:45:01.730811938Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 18:45:01.730920 env[1281]: time="2023-10-02T18:45:01.730902990Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 18:45:01.730982 env[1281]: time="2023-10-02T18:45:01.730969217Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 18:45:01.733326 env[1281]: time="2023-10-02T18:45:01.733272706Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 18:45:01.733326 env[1281]: time="2023-10-02T18:45:01.733310984Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 18:45:01.733406 env[1281]: time="2023-10-02T18:45:01.733326440Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 18:45:01.733406 env[1281]: time="2023-10-02T18:45:01.733337691Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 18:45:01.907817 env[1281]: time="2023-10-02T18:45:01.907240145Z" level=info msg="Loading containers: start." Oct 2 18:45:01.956000 audit[1315]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1315 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:01.956000 audit[1315]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffcf1e6150 a2=0 a3=1 items=0 ppid=1281 pid=1315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:01.956000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 18:45:01.959000 audit[1317]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1317 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:01.959000 audit[1317]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffd0b2f7e0 a2=0 a3=1 items=0 ppid=1281 pid=1317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:01.959000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 18:45:01.961000 audit[1319]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1319 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:01.961000 audit[1319]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffc2d7ac0 a2=0 a3=1 items=0 ppid=1281 pid=1319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:01.961000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 18:45:01.963000 audit[1321]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1321 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:01.963000 audit[1321]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe8766b20 a2=0 a3=1 items=0 ppid=1281 pid=1321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:01.963000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 18:45:01.966000 audit[1323]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1323 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:01.966000 audit[1323]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffee49e240 a2=0 a3=1 items=0 ppid=1281 pid=1323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:01.966000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 18:45:01.989000 audit[1328]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1328 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:01.989000 audit[1328]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc0a2c520 a2=0 a3=1 items=0 ppid=1281 pid=1328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:01.989000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 18:45:01.995000 audit[1330]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1330 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:01.995000 audit[1330]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff6212ad0 a2=0 a3=1 items=0 ppid=1281 pid=1330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:01.995000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 18:45:01.997000 audit[1332]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1332 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:01.997000 audit[1332]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffd92043f0 a2=0 a3=1 items=0 ppid=1281 pid=1332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:01.997000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 18:45:01.998000 audit[1334]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1334 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:01.998000 audit[1334]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffedeedf10 a2=0 a3=1 items=0 ppid=1281 pid=1334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:01.998000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 18:45:02.005000 audit[1338]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1338 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:02.005000 audit[1338]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffff658f600 a2=0 a3=1 items=0 ppid=1281 pid=1338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:02.005000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 18:45:02.006000 audit[1339]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1339 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:02.006000 audit[1339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd9ce8740 a2=0 a3=1 items=0 ppid=1281 pid=1339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:02.006000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 18:45:02.013468 kernel: Initializing XFRM netlink socket Oct 2 18:45:02.039225 env[1281]: time="2023-10-02T18:45:02.039185689Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 18:45:02.055000 audit[1347]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1347 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:02.055000 audit[1347]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=fffff9a338f0 a2=0 a3=1 items=0 ppid=1281 pid=1347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:02.055000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 18:45:02.073000 audit[1350]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1350 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:02.073000 audit[1350]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffcd56f4e0 a2=0 a3=1 items=0 ppid=1281 pid=1350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:02.073000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 18:45:02.076000 audit[1353]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1353 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:02.076000 audit[1353]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff11ab480 a2=0 a3=1 items=0 ppid=1281 pid=1353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:02.076000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 18:45:02.078000 audit[1355]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1355 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:02.078000 audit[1355]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffcb647eb0 a2=0 a3=1 items=0 ppid=1281 pid=1355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:02.078000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 18:45:02.080000 audit[1357]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1357 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:02.080000 audit[1357]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffd8652e60 a2=0 a3=1 items=0 ppid=1281 pid=1357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:02.080000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 18:45:02.082000 audit[1359]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1359 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:02.082000 audit[1359]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffec5fe390 a2=0 a3=1 items=0 ppid=1281 pid=1359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:02.082000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 18:45:02.084000 audit[1361]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1361 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:02.084000 audit[1361]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffdb783a80 a2=0 a3=1 items=0 ppid=1281 pid=1361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:02.084000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 18:45:02.091000 audit[1364]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1364 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:02.091000 audit[1364]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffee06b830 a2=0 a3=1 items=0 ppid=1281 pid=1364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:02.091000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 18:45:02.093000 audit[1366]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1366 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:02.093000 audit[1366]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffcf74af00 a2=0 a3=1 items=0 ppid=1281 pid=1366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:02.093000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 18:45:02.095000 audit[1368]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1368 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:02.095000 audit[1368]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffe1aaf0e0 a2=0 a3=1 items=0 ppid=1281 pid=1368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:02.095000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 18:45:02.097000 audit[1370]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1370 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:02.097000 audit[1370]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff21cf6f0 a2=0 a3=1 items=0 ppid=1281 pid=1370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:02.097000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 18:45:02.098859 systemd-networkd[1040]: docker0: Link UP Oct 2 18:45:02.104000 audit[1374]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1374 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:02.104000 audit[1374]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffffde65c00 a2=0 a3=1 items=0 ppid=1281 pid=1374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:02.104000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 18:45:02.105000 audit[1375]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1375 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:02.105000 audit[1375]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffffcc28220 a2=0 a3=1 items=0 ppid=1281 pid=1375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:02.105000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 18:45:02.107162 env[1281]: time="2023-10-02T18:45:02.107129516Z" level=info msg="Loading containers: done." Oct 2 18:45:02.130600 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1547837130-merged.mount: Deactivated successfully. Oct 2 18:45:02.135066 env[1281]: time="2023-10-02T18:45:02.135020266Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 18:45:02.135216 env[1281]: time="2023-10-02T18:45:02.135189467Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 18:45:02.135322 env[1281]: time="2023-10-02T18:45:02.135286719Z" level=info msg="Daemon has completed initialization" Oct 2 18:45:02.149045 systemd[1]: Started docker.service. Oct 2 18:45:02.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:02.152980 env[1281]: time="2023-10-02T18:45:02.152866939Z" level=info msg="API listen on /run/docker.sock" Oct 2 18:45:02.174636 systemd[1]: Reloading. Oct 2 18:45:02.232541 /usr/lib/systemd/system-generators/torcx-generator[1424]: time="2023-10-02T18:45:02Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 18:45:02.232567 /usr/lib/systemd/system-generators/torcx-generator[1424]: time="2023-10-02T18:45:02Z" level=info msg="torcx already run" Oct 2 18:45:02.294121 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 18:45:02.294304 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 18:45:02.309403 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 18:45:02.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.356000 audit: BPF prog-id=31 op=LOAD Oct 2 18:45:02.356000 audit: BPF prog-id=21 op=UNLOAD Oct 2 18:45:02.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.357000 audit: BPF prog-id=32 op=LOAD Oct 2 18:45:02.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.357000 audit: BPF prog-id=33 op=LOAD Oct 2 18:45:02.357000 audit: BPF prog-id=22 op=UNLOAD Oct 2 18:45:02.357000 audit: BPF prog-id=23 op=UNLOAD Oct 2 18:45:02.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.359000 audit: BPF prog-id=34 op=LOAD Oct 2 18:45:02.359000 audit: BPF prog-id=20 op=UNLOAD Oct 2 18:45:02.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.360000 audit: BPF prog-id=35 op=LOAD Oct 2 18:45:02.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.361000 audit: BPF prog-id=36 op=LOAD Oct 2 18:45:02.361000 audit: BPF prog-id=18 op=UNLOAD Oct 2 18:45:02.361000 audit: BPF prog-id=19 op=UNLOAD Oct 2 18:45:02.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.362000 audit: BPF prog-id=37 op=LOAD Oct 2 18:45:02.362000 audit: BPF prog-id=15 op=UNLOAD Oct 2 18:45:02.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.363000 audit: BPF prog-id=38 op=LOAD Oct 2 18:45:02.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.363000 audit: BPF prog-id=39 op=LOAD Oct 2 18:45:02.363000 audit: BPF prog-id=16 op=UNLOAD Oct 2 18:45:02.363000 audit: BPF prog-id=17 op=UNLOAD Oct 2 18:45:02.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.366000 audit: BPF prog-id=40 op=LOAD Oct 2 18:45:02.366000 audit: BPF prog-id=25 op=UNLOAD Oct 2 18:45:02.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.367000 audit: BPF prog-id=41 op=LOAD Oct 2 18:45:02.367000 audit: BPF prog-id=29 op=UNLOAD Oct 2 18:45:02.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.369000 audit: BPF prog-id=42 op=LOAD Oct 2 18:45:02.369000 audit: BPF prog-id=26 op=UNLOAD Oct 2 18:45:02.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.369000 audit: BPF prog-id=43 op=LOAD Oct 2 18:45:02.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.369000 audit: BPF prog-id=44 op=LOAD Oct 2 18:45:02.369000 audit: BPF prog-id=27 op=UNLOAD Oct 2 18:45:02.369000 audit: BPF prog-id=28 op=UNLOAD Oct 2 18:45:02.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:02.370000 audit: BPF prog-id=45 op=LOAD Oct 2 18:45:02.370000 audit: BPF prog-id=24 op=UNLOAD Oct 2 18:45:02.384389 systemd[1]: Started kubelet.service. Oct 2 18:45:02.383000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:02.543466 kubelet[1460]: E1002 18:45:02.543319 1460 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 18:45:02.547960 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 18:45:02.548092 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 18:45:02.546000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 18:45:02.770966 env[1139]: time="2023-10-02T18:45:02.770682570Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 18:45:03.574731 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount195657723.mount: Deactivated successfully. Oct 2 18:45:07.659973 env[1139]: time="2023-10-02T18:45:07.659928243Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:07.661426 env[1139]: time="2023-10-02T18:45:07.661394169Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:07.663840 env[1139]: time="2023-10-02T18:45:07.663816072Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:07.665211 env[1139]: time="2023-10-02T18:45:07.665189575Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:07.665975 env[1139]: time="2023-10-02T18:45:07.665946294Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99\"" Oct 2 18:45:07.676536 env[1139]: time="2023-10-02T18:45:07.676500259Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 18:45:11.343169 env[1139]: time="2023-10-02T18:45:11.343121187Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:11.346211 env[1139]: time="2023-10-02T18:45:11.346179849Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:11.347808 env[1139]: time="2023-10-02T18:45:11.347766451Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:11.350437 env[1139]: time="2023-10-02T18:45:11.350399327Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:11.350779 env[1139]: time="2023-10-02T18:45:11.350749233Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013\"" Oct 2 18:45:11.361032 env[1139]: time="2023-10-02T18:45:11.360995827Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 18:45:12.799060 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 18:45:12.801203 kernel: kauditd_printk_skb: 259 callbacks suppressed Oct 2 18:45:12.801246 kernel: audit: type=1130 audit(1696272312.798:371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:12.798000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:12.799248 systemd[1]: Stopped kubelet.service. Oct 2 18:45:12.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:12.800702 systemd[1]: Started kubelet.service. Oct 2 18:45:12.803119 kernel: audit: type=1131 audit(1696272312.798:372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:12.803166 kernel: audit: type=1130 audit(1696272312.800:373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:12.800000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:12.846125 kubelet[1496]: E1002 18:45:12.846067 1496 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 18:45:12.849173 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 18:45:12.849300 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 18:45:12.849000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 18:45:12.851479 kernel: audit: type=1131 audit(1696272312.849:374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 18:45:13.907745 env[1139]: time="2023-10-02T18:45:13.907693990Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:13.909198 env[1139]: time="2023-10-02T18:45:13.909160834Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:13.911025 env[1139]: time="2023-10-02T18:45:13.910995089Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:13.914120 env[1139]: time="2023-10-02T18:45:13.914079687Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:13.914777 env[1139]: time="2023-10-02T18:45:13.914744157Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803\"" Oct 2 18:45:13.925044 env[1139]: time="2023-10-02T18:45:13.925012143Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 18:45:15.012436 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1130387788.mount: Deactivated successfully. Oct 2 18:45:16.277937 env[1139]: time="2023-10-02T18:45:16.277469681Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:16.280157 env[1139]: time="2023-10-02T18:45:16.279897374Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:16.281765 env[1139]: time="2023-10-02T18:45:16.281740802Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:16.284494 env[1139]: time="2023-10-02T18:45:16.284151688Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:16.284869 env[1139]: time="2023-10-02T18:45:16.284817944Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343\"" Oct 2 18:45:16.295364 env[1139]: time="2023-10-02T18:45:16.295328701Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 18:45:16.805043 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1631077359.mount: Deactivated successfully. Oct 2 18:45:16.812077 env[1139]: time="2023-10-02T18:45:16.811999335Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:16.814397 env[1139]: time="2023-10-02T18:45:16.814317386Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:16.818037 env[1139]: time="2023-10-02T18:45:16.817961466Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:16.820585 env[1139]: time="2023-10-02T18:45:16.820512606Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:16.821121 env[1139]: time="2023-10-02T18:45:16.821070980Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 18:45:16.833663 env[1139]: time="2023-10-02T18:45:16.833618360Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 18:45:17.983020 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2542423316.mount: Deactivated successfully. Oct 2 18:45:21.564610 env[1139]: time="2023-10-02T18:45:21.564558690Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:21.565655 env[1139]: time="2023-10-02T18:45:21.565625947Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:21.568554 env[1139]: time="2023-10-02T18:45:21.568300571Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:21.569462 env[1139]: time="2023-10-02T18:45:21.569416842Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:21.570140 env[1139]: time="2023-10-02T18:45:21.570110475Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb\"" Oct 2 18:45:21.582071 env[1139]: time="2023-10-02T18:45:21.582021829Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 18:45:23.100185 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 18:45:23.098000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:23.100351 systemd[1]: Stopped kubelet.service. Oct 2 18:45:23.098000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:23.103868 kernel: audit: type=1130 audit(1696272323.098:375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:23.103912 kernel: audit: type=1131 audit(1696272323.098:376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:23.103933 kernel: audit: type=1130 audit(1696272323.100:377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:23.100000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:23.101806 systemd[1]: Started kubelet.service. Oct 2 18:45:23.154908 kubelet[1527]: E1002 18:45:23.154673 1527 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 18:45:23.156000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 18:45:23.157857 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 18:45:23.157976 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 18:45:23.160472 kernel: audit: type=1131 audit(1696272323.156:378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 18:45:25.047827 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1046080744.mount: Deactivated successfully. Oct 2 18:45:25.670795 env[1139]: time="2023-10-02T18:45:25.670735690Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:25.672879 env[1139]: time="2023-10-02T18:45:25.672842703Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:25.674726 env[1139]: time="2023-10-02T18:45:25.674689220Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:25.676218 env[1139]: time="2023-10-02T18:45:25.676188022Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:25.677001 env[1139]: time="2023-10-02T18:45:25.676971351Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\"" Oct 2 18:45:30.421936 systemd[1]: Stopped kubelet.service. Oct 2 18:45:30.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:30.421000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:30.426004 kernel: audit: type=1130 audit(1696272330.421:379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:30.426092 kernel: audit: type=1131 audit(1696272330.421:380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:30.439020 systemd[1]: Reloading. Oct 2 18:45:30.504525 /usr/lib/systemd/system-generators/torcx-generator[1628]: time="2023-10-02T18:45:30Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 18:45:30.504853 /usr/lib/systemd/system-generators/torcx-generator[1628]: time="2023-10-02T18:45:30Z" level=info msg="torcx already run" Oct 2 18:45:30.565756 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 18:45:30.565776 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 18:45:30.581004 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 18:45:30.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.636176 kernel: audit: type=1400 audit(1696272330.632:381): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.636225 kernel: audit: type=1400 audit(1696272330.632:382): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.636246 kernel: audit: type=1400 audit(1696272330.632:383): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.637955 kernel: audit: type=1400 audit(1696272330.632:384): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.639680 kernel: audit: type=1400 audit(1696272330.632:385): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.641371 kernel: audit: type=1400 audit(1696272330.632:386): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.643142 kernel: audit: type=1400 audit(1696272330.632:387): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.644854 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 18:45:30.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.634000 audit: BPF prog-id=46 op=LOAD Oct 2 18:45:30.634000 audit: BPF prog-id=31 op=UNLOAD Oct 2 18:45:30.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.635000 audit: BPF prog-id=47 op=LOAD Oct 2 18:45:30.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.637000 audit: BPF prog-id=48 op=LOAD Oct 2 18:45:30.637000 audit: BPF prog-id=32 op=UNLOAD Oct 2 18:45:30.637000 audit: BPF prog-id=33 op=UNLOAD Oct 2 18:45:30.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.639000 audit: BPF prog-id=49 op=LOAD Oct 2 18:45:30.639000 audit: BPF prog-id=34 op=UNLOAD Oct 2 18:45:30.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.640000 audit: BPF prog-id=50 op=LOAD Oct 2 18:45:30.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.642000 audit: BPF prog-id=51 op=LOAD Oct 2 18:45:30.642000 audit: BPF prog-id=35 op=UNLOAD Oct 2 18:45:30.642000 audit: BPF prog-id=36 op=UNLOAD Oct 2 18:45:30.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.645000 audit: BPF prog-id=52 op=LOAD Oct 2 18:45:30.645000 audit: BPF prog-id=37 op=UNLOAD Oct 2 18:45:30.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.645000 audit: BPF prog-id=53 op=LOAD Oct 2 18:45:30.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.645000 audit: BPF prog-id=54 op=LOAD Oct 2 18:45:30.645000 audit: BPF prog-id=38 op=UNLOAD Oct 2 18:45:30.645000 audit: BPF prog-id=39 op=UNLOAD Oct 2 18:45:30.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.647000 audit: BPF prog-id=55 op=LOAD Oct 2 18:45:30.647000 audit: BPF prog-id=40 op=UNLOAD Oct 2 18:45:30.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.648000 audit: BPF prog-id=56 op=LOAD Oct 2 18:45:30.648000 audit: BPF prog-id=41 op=UNLOAD Oct 2 18:45:30.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit: BPF prog-id=57 op=LOAD Oct 2 18:45:30.649000 audit: BPF prog-id=42 op=UNLOAD Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit: BPF prog-id=58 op=LOAD Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit: BPF prog-id=59 op=LOAD Oct 2 18:45:30.649000 audit: BPF prog-id=43 op=UNLOAD Oct 2 18:45:30.649000 audit: BPF prog-id=44 op=UNLOAD Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:30.649000 audit: BPF prog-id=60 op=LOAD Oct 2 18:45:30.649000 audit: BPF prog-id=45 op=UNLOAD Oct 2 18:45:30.660690 systemd[1]: Started kubelet.service. Oct 2 18:45:30.660000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:30.713410 kubelet[1665]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 18:45:30.713410 kubelet[1665]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 18:45:30.713720 kubelet[1665]: I1002 18:45:30.713466 1665 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 18:45:30.715587 kubelet[1665]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 18:45:30.715587 kubelet[1665]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 18:45:31.170591 kubelet[1665]: I1002 18:45:31.170498 1665 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 18:45:31.170591 kubelet[1665]: I1002 18:45:31.170526 1665 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 18:45:31.170815 kubelet[1665]: I1002 18:45:31.170796 1665 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 18:45:31.175622 kubelet[1665]: I1002 18:45:31.175599 1665 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 18:45:31.175777 kubelet[1665]: E1002 18:45:31.175759 1665 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.18:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.18:6443: connect: connection refused Oct 2 18:45:31.177113 kubelet[1665]: W1002 18:45:31.177089 1665 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 18:45:31.177848 kubelet[1665]: I1002 18:45:31.177829 1665 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 18:45:31.178243 kubelet[1665]: I1002 18:45:31.178224 1665 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 18:45:31.178317 kubelet[1665]: I1002 18:45:31.178302 1665 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 18:45:31.178409 kubelet[1665]: I1002 18:45:31.178332 1665 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 18:45:31.178409 kubelet[1665]: I1002 18:45:31.178346 1665 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 18:45:31.178468 kubelet[1665]: I1002 18:45:31.178441 1665 state_mem.go:36] "Initialized new in-memory state store" Oct 2 18:45:31.183906 kubelet[1665]: I1002 18:45:31.183875 1665 kubelet.go:398] "Attempting to sync node with API server" Oct 2 18:45:31.183906 kubelet[1665]: I1002 18:45:31.183901 1665 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 18:45:31.184015 kubelet[1665]: I1002 18:45:31.183997 1665 kubelet.go:297] "Adding apiserver pod source" Oct 2 18:45:31.184015 kubelet[1665]: I1002 18:45:31.184009 1665 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 18:45:31.187539 kubelet[1665]: W1002 18:45:31.185320 1665 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.18:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Oct 2 18:45:31.187608 kubelet[1665]: E1002 18:45:31.187552 1665 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.18:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Oct 2 18:45:31.187965 kubelet[1665]: I1002 18:45:31.187936 1665 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 18:45:31.188733 kubelet[1665]: W1002 18:45:31.188690 1665 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Oct 2 18:45:31.188788 kubelet[1665]: E1002 18:45:31.188737 1665 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Oct 2 18:45:31.189523 kubelet[1665]: W1002 18:45:31.189500 1665 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 18:45:31.190245 kubelet[1665]: I1002 18:45:31.190211 1665 server.go:1186] "Started kubelet" Oct 2 18:45:31.191271 kubelet[1665]: I1002 18:45:31.191244 1665 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 18:45:31.192332 kubelet[1665]: E1002 18:45:31.192188 1665 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a5eb2aee9bff6", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 45, 31, 190157302, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 45, 31, 190157302, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.0.0.18:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.18:6443: connect: connection refused'(may retry after sleeping) Oct 2 18:45:31.192475 kubelet[1665]: E1002 18:45:31.192403 1665 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 18:45:31.192475 kubelet[1665]: E1002 18:45:31.192472 1665 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 18:45:31.192703 kubelet[1665]: I1002 18:45:31.192689 1665 server.go:451] "Adding debug handlers to kubelet server" Oct 2 18:45:31.193000 audit[1665]: AVC avc: denied { mac_admin } for pid=1665 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:31.193000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:45:31.193000 audit[1665]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bbc540 a1=4000bccfd8 a2=4000bbc510 a3=25 items=0 ppid=1 pid=1665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.193000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:45:31.193000 audit[1665]: AVC avc: denied { mac_admin } for pid=1665 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:31.193000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:45:31.193000 audit[1665]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4001060400 a1=4000bccff0 a2=4000bbc5d0 a3=25 items=0 ppid=1 pid=1665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.193000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:45:31.193987 kubelet[1665]: I1002 18:45:31.193634 1665 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 18:45:31.193987 kubelet[1665]: I1002 18:45:31.193671 1665 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 18:45:31.193987 kubelet[1665]: I1002 18:45:31.193739 1665 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 18:45:31.195316 kubelet[1665]: E1002 18:45:31.195214 1665 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 18:45:31.195362 kubelet[1665]: I1002 18:45:31.195327 1665 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 18:45:31.195664 kubelet[1665]: I1002 18:45:31.195649 1665 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 18:45:31.196179 kubelet[1665]: E1002 18:45:31.196145 1665 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://10.0.0.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.18:6443: connect: connection refused Oct 2 18:45:31.196845 kubelet[1665]: W1002 18:45:31.196669 1665 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Oct 2 18:45:31.196905 kubelet[1665]: E1002 18:45:31.196857 1665 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Oct 2 18:45:31.204000 audit[1677]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1677 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:31.204000 audit[1677]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffeeefcb90 a2=0 a3=1 items=0 ppid=1665 pid=1677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.204000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 18:45:31.206000 audit[1678]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1678 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:31.206000 audit[1678]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffee35a2f0 a2=0 a3=1 items=0 ppid=1665 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.206000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 18:45:31.208000 audit[1680]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1680 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:31.208000 audit[1680]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffeda9be50 a2=0 a3=1 items=0 ppid=1665 pid=1680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.208000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 18:45:31.210000 audit[1683]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1683 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:31.210000 audit[1683]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffeb0c3da0 a2=0 a3=1 items=0 ppid=1665 pid=1683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.210000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 18:45:31.212599 kubelet[1665]: I1002 18:45:31.212562 1665 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 18:45:31.212599 kubelet[1665]: I1002 18:45:31.212596 1665 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 18:45:31.212731 kubelet[1665]: I1002 18:45:31.212614 1665 state_mem.go:36] "Initialized new in-memory state store" Oct 2 18:45:31.216417 kubelet[1665]: I1002 18:45:31.216386 1665 policy_none.go:49] "None policy: Start" Oct 2 18:45:31.216907 kubelet[1665]: I1002 18:45:31.216889 1665 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 18:45:31.216943 kubelet[1665]: I1002 18:45:31.216913 1665 state_mem.go:35] "Initializing new in-memory state store" Oct 2 18:45:31.219000 audit[1689]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1689 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:31.219000 audit[1689]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffe3ad3f60 a2=0 a3=1 items=0 ppid=1665 pid=1689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.219000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 18:45:31.222000 audit[1690]: NETFILTER_CFG table=nat:31 family=2 entries=1 op=nft_register_chain pid=1690 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:31.222000 audit[1690]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffa03d650 a2=0 a3=1 items=0 ppid=1665 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.222000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 18:45:31.223799 systemd[1]: Created slice kubepods.slice. Oct 2 18:45:31.227978 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 18:45:31.230837 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 18:45:31.231000 audit[1693]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_rule pid=1693 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:31.231000 audit[1693]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffdacd0450 a2=0 a3=1 items=0 ppid=1665 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.231000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 18:45:31.238121 kubelet[1665]: I1002 18:45:31.238096 1665 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 18:45:31.237000 audit[1665]: AVC avc: denied { mac_admin } for pid=1665 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:31.237000 audit[1697]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=1697 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:31.237000 audit[1697]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=ffffcfaf9620 a2=0 a3=1 items=0 ppid=1665 pid=1697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.237000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 18:45:31.237000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:45:31.237000 audit[1665]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ceb770 a1=4001182960 a2=4000ceb740 a3=25 items=0 ppid=1 pid=1665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.237000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:45:31.238600 kubelet[1665]: I1002 18:45:31.238479 1665 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 18:45:31.238677 kubelet[1665]: I1002 18:45:31.238663 1665 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 18:45:31.239310 kubelet[1665]: E1002 18:45:31.239286 1665 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Oct 2 18:45:31.239000 audit[1698]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1698 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:31.239000 audit[1698]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc8fb8db0 a2=0 a3=1 items=0 ppid=1665 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.239000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 18:45:31.240000 audit[1699]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1699 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:31.240000 audit[1699]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc8de30a0 a2=0 a3=1 items=0 ppid=1665 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.240000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 18:45:31.242000 audit[1701]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=1701 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:31.242000 audit[1701]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe8ff0bd0 a2=0 a3=1 items=0 ppid=1665 pid=1701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.242000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 18:45:31.245000 audit[1703]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_rule pid=1703 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:31.245000 audit[1703]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffe89b29e0 a2=0 a3=1 items=0 ppid=1665 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.245000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 18:45:31.247000 audit[1705]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_rule pid=1705 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:31.247000 audit[1705]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=ffffed078600 a2=0 a3=1 items=0 ppid=1665 pid=1705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.247000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 18:45:31.250000 audit[1707]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=1707 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:31.250000 audit[1707]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=ffffd0243f30 a2=0 a3=1 items=0 ppid=1665 pid=1707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.250000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 18:45:31.252000 audit[1709]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=1709 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:31.252000 audit[1709]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=540 a0=3 a1=ffffce85a690 a2=0 a3=1 items=0 ppid=1665 pid=1709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.252000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 18:45:31.253603 kubelet[1665]: I1002 18:45:31.253582 1665 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 18:45:31.253851 kubelet[1665]: E1002 18:45:31.253740 1665 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a5eb2aee9bff6", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 45, 31, 190157302, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 45, 31, 190157302, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.0.0.18:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.18:6443: connect: connection refused'(may retry after sleeping) Oct 2 18:45:31.254000 audit[1710]: NETFILTER_CFG table=mangle:41 family=10 entries=2 op=nft_register_chain pid=1710 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:31.254000 audit[1710]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd9715990 a2=0 a3=1 items=0 ppid=1665 pid=1710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.254000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 18:45:31.254000 audit[1711]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=1711 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:31.254000 audit[1711]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc8813900 a2=0 a3=1 items=0 ppid=1665 pid=1711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.254000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 18:45:31.255000 audit[1712]: NETFILTER_CFG table=nat:43 family=2 entries=1 op=nft_register_chain pid=1712 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:31.255000 audit[1712]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd0350a40 a2=0 a3=1 items=0 ppid=1665 pid=1712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.255000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 18:45:31.255000 audit[1713]: NETFILTER_CFG table=nat:44 family=10 entries=2 op=nft_register_chain pid=1713 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:31.255000 audit[1713]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffe7b3ce40 a2=0 a3=1 items=0 ppid=1665 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.255000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 18:45:31.256000 audit[1714]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=1714 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:31.256000 audit[1714]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe323d5e0 a2=0 a3=1 items=0 ppid=1665 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.256000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 18:45:31.258000 audit[1716]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_rule pid=1716 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:31.258000 audit[1716]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe65e6ee0 a2=0 a3=1 items=0 ppid=1665 pid=1716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.258000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 18:45:31.259000 audit[1717]: NETFILTER_CFG table=filter:47 family=10 entries=2 op=nft_register_chain pid=1717 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:31.259000 audit[1717]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=ffffc6e24330 a2=0 a3=1 items=0 ppid=1665 pid=1717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.259000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 18:45:31.262000 audit[1719]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_rule pid=1719 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:31.262000 audit[1719]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=ffffc102f900 a2=0 a3=1 items=0 ppid=1665 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.262000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 18:45:31.263000 audit[1720]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=1720 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:31.263000 audit[1720]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd271ca50 a2=0 a3=1 items=0 ppid=1665 pid=1720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.263000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 18:45:31.264000 audit[1721]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_chain pid=1721 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:31.264000 audit[1721]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcd3e5b40 a2=0 a3=1 items=0 ppid=1665 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.264000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 18:45:31.267000 audit[1723]: NETFILTER_CFG table=nat:51 family=10 entries=1 op=nft_register_rule pid=1723 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:31.267000 audit[1723]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe8daba90 a2=0 a3=1 items=0 ppid=1665 pid=1723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.267000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 18:45:31.269000 audit[1725]: NETFILTER_CFG table=nat:52 family=10 entries=2 op=nft_register_chain pid=1725 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:31.269000 audit[1725]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffc1bc5c60 a2=0 a3=1 items=0 ppid=1665 pid=1725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.269000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 18:45:31.272000 audit[1727]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_rule pid=1727 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:31.272000 audit[1727]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=fffff00c6290 a2=0 a3=1 items=0 ppid=1665 pid=1727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.272000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 18:45:31.275000 audit[1729]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=1729 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:31.275000 audit[1729]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=ffffcec8bd90 a2=0 a3=1 items=0 ppid=1665 pid=1729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.275000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 18:45:31.278000 audit[1731]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=1731 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:31.278000 audit[1731]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=556 a0=3 a1=ffffde3d33a0 a2=0 a3=1 items=0 ppid=1665 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.278000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 18:45:31.279581 kubelet[1665]: I1002 18:45:31.279542 1665 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 18:45:31.279581 kubelet[1665]: I1002 18:45:31.279572 1665 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 18:45:31.279667 kubelet[1665]: I1002 18:45:31.279591 1665 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 18:45:31.279667 kubelet[1665]: E1002 18:45:31.279643 1665 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 18:45:31.280385 kubelet[1665]: W1002 18:45:31.280358 1665 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Oct 2 18:45:31.280520 kubelet[1665]: E1002 18:45:31.280505 1665 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Oct 2 18:45:31.280000 audit[1732]: NETFILTER_CFG table=mangle:56 family=10 entries=1 op=nft_register_chain pid=1732 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:31.280000 audit[1732]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffeb0233a0 a2=0 a3=1 items=0 ppid=1665 pid=1732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.280000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 18:45:31.281000 audit[1733]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_chain pid=1733 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:31.281000 audit[1733]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc5422b10 a2=0 a3=1 items=0 ppid=1665 pid=1733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.281000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 18:45:31.282000 audit[1734]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=1734 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:31.282000 audit[1734]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffa3e0150 a2=0 a3=1 items=0 ppid=1665 pid=1734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:31.282000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 18:45:31.297090 kubelet[1665]: I1002 18:45:31.297070 1665 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 18:45:31.297623 kubelet[1665]: E1002 18:45:31.297605 1665 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.18:6443/api/v1/nodes\": dial tcp 10.0.0.18:6443: connect: connection refused" node="localhost" Oct 2 18:45:31.379756 kubelet[1665]: I1002 18:45:31.379712 1665 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:45:31.380828 kubelet[1665]: I1002 18:45:31.380809 1665 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:45:31.381589 kubelet[1665]: I1002 18:45:31.381567 1665 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:45:31.382433 kubelet[1665]: I1002 18:45:31.382413 1665 status_manager.go:698] "Failed to get status for pod" podUID=b3fbb6a05b0456c4809ee638aa5cfabe pod="kube-system/kube-controller-manager-localhost" err="Get \"https://10.0.0.18:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-localhost\": dial tcp 10.0.0.18:6443: connect: connection refused" Oct 2 18:45:31.383336 kubelet[1665]: I1002 18:45:31.383317 1665 status_manager.go:698] "Failed to get status for pod" podUID=fbbee22b6941d370b4e7de3cf42df07f pod="kube-system/kube-scheduler-localhost" err="Get \"https://10.0.0.18:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-localhost\": dial tcp 10.0.0.18:6443: connect: connection refused" Oct 2 18:45:31.383535 kubelet[1665]: I1002 18:45:31.383514 1665 status_manager.go:698] "Failed to get status for pod" podUID=8339bc550a594e1c9482d80cfa770333 pod="kube-system/kube-apiserver-localhost" err="Get \"https://10.0.0.18:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-localhost\": dial tcp 10.0.0.18:6443: connect: connection refused" Oct 2 18:45:31.386480 systemd[1]: Created slice kubepods-burstable-podb3fbb6a05b0456c4809ee638aa5cfabe.slice. Oct 2 18:45:31.396927 kubelet[1665]: E1002 18:45:31.396893 1665 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://10.0.0.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.18:6443: connect: connection refused Oct 2 18:45:31.397436 systemd[1]: Created slice kubepods-burstable-podfbbee22b6941d370b4e7de3cf42df07f.slice. Oct 2 18:45:31.410675 systemd[1]: Created slice kubepods-burstable-pod8339bc550a594e1c9482d80cfa770333.slice. Oct 2 18:45:31.497572 kubelet[1665]: I1002 18:45:31.497524 1665 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8339bc550a594e1c9482d80cfa770333-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"8339bc550a594e1c9482d80cfa770333\") " pod="kube-system/kube-apiserver-localhost" Oct 2 18:45:31.497572 kubelet[1665]: I1002 18:45:31.497569 1665 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 18:45:31.497749 kubelet[1665]: I1002 18:45:31.497595 1665 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 18:45:31.497749 kubelet[1665]: I1002 18:45:31.497616 1665 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 18:45:31.497749 kubelet[1665]: I1002 18:45:31.497663 1665 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fbbee22b6941d370b4e7de3cf42df07f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"fbbee22b6941d370b4e7de3cf42df07f\") " pod="kube-system/kube-scheduler-localhost" Oct 2 18:45:31.497749 kubelet[1665]: I1002 18:45:31.497705 1665 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8339bc550a594e1c9482d80cfa770333-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"8339bc550a594e1c9482d80cfa770333\") " pod="kube-system/kube-apiserver-localhost" Oct 2 18:45:31.497749 kubelet[1665]: I1002 18:45:31.497727 1665 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8339bc550a594e1c9482d80cfa770333-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"8339bc550a594e1c9482d80cfa770333\") " pod="kube-system/kube-apiserver-localhost" Oct 2 18:45:31.497924 kubelet[1665]: I1002 18:45:31.497749 1665 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 18:45:31.497924 kubelet[1665]: I1002 18:45:31.497772 1665 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 18:45:31.498579 kubelet[1665]: I1002 18:45:31.498548 1665 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 18:45:31.498918 kubelet[1665]: E1002 18:45:31.498877 1665 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.18:6443/api/v1/nodes\": dial tcp 10.0.0.18:6443: connect: connection refused" node="localhost" Oct 2 18:45:31.694809 kubelet[1665]: E1002 18:45:31.694752 1665 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:31.695378 env[1139]: time="2023-10-02T18:45:31.695324224Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:b3fbb6a05b0456c4809ee638aa5cfabe,Namespace:kube-system,Attempt:0,}" Oct 2 18:45:31.709479 kubelet[1665]: E1002 18:45:31.709216 1665 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:31.709670 env[1139]: time="2023-10-02T18:45:31.709633192Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:fbbee22b6941d370b4e7de3cf42df07f,Namespace:kube-system,Attempt:0,}" Oct 2 18:45:31.713010 kubelet[1665]: E1002 18:45:31.712980 1665 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:31.713334 env[1139]: time="2023-10-02T18:45:31.713304248Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:8339bc550a594e1c9482d80cfa770333,Namespace:kube-system,Attempt:0,}" Oct 2 18:45:31.797991 kubelet[1665]: E1002 18:45:31.797896 1665 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://10.0.0.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.18:6443: connect: connection refused Oct 2 18:45:31.900307 kubelet[1665]: I1002 18:45:31.900271 1665 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 18:45:31.900632 kubelet[1665]: E1002 18:45:31.900610 1665 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.18:6443/api/v1/nodes\": dial tcp 10.0.0.18:6443: connect: connection refused" node="localhost" Oct 2 18:45:32.182916 kubelet[1665]: W1002 18:45:32.182796 1665 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Oct 2 18:45:32.182916 kubelet[1665]: E1002 18:45:32.182842 1665 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Oct 2 18:45:32.278393 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1066855074.mount: Deactivated successfully. Oct 2 18:45:32.299003 env[1139]: time="2023-10-02T18:45:32.298942155Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:32.299842 env[1139]: time="2023-10-02T18:45:32.299795832Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:32.314500 env[1139]: time="2023-10-02T18:45:32.313905522Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:32.317302 env[1139]: time="2023-10-02T18:45:32.317239058Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:32.318552 env[1139]: time="2023-10-02T18:45:32.318510712Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:32.320314 env[1139]: time="2023-10-02T18:45:32.320280515Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:32.322284 env[1139]: time="2023-10-02T18:45:32.322243383Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:32.324293 env[1139]: time="2023-10-02T18:45:32.324044990Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:32.325068 env[1139]: time="2023-10-02T18:45:32.325023363Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:32.327740 env[1139]: time="2023-10-02T18:45:32.327695289Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:32.330372 env[1139]: time="2023-10-02T18:45:32.330337611Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:32.332364 env[1139]: time="2023-10-02T18:45:32.332332884Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:32.371298 env[1139]: time="2023-10-02T18:45:32.371032498Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:45:32.371298 env[1139]: time="2023-10-02T18:45:32.371081065Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:45:32.371298 env[1139]: time="2023-10-02T18:45:32.371092507Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:45:32.371779 env[1139]: time="2023-10-02T18:45:32.371678907Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/45d12ed26ea5773ac71da5e809642d1f94a0766f3e2d22997d7c05e0a68ec10a pid=1752 runtime=io.containerd.runc.v2 Oct 2 18:45:32.381692 env[1139]: time="2023-10-02T18:45:32.381562499Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:45:32.381968 env[1139]: time="2023-10-02T18:45:32.381654432Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:45:32.381968 env[1139]: time="2023-10-02T18:45:32.381674514Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:45:32.387099 systemd[1]: Started cri-containerd-45d12ed26ea5773ac71da5e809642d1f94a0766f3e2d22997d7c05e0a68ec10a.scope. Oct 2 18:45:32.396810 env[1139]: time="2023-10-02T18:45:32.388592501Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:45:32.396810 env[1139]: time="2023-10-02T18:45:32.388644028Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:45:32.396810 env[1139]: time="2023-10-02T18:45:32.388654989Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:45:32.396810 env[1139]: time="2023-10-02T18:45:32.388813011Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b600172a76f557f84e90af1df6956df15320bae5731c7c067c8a8eb4abf54f93 pid=1787 runtime=io.containerd.runc.v2 Oct 2 18:45:32.396810 env[1139]: time="2023-10-02T18:45:32.389027240Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a1c3386cd8868e6f8b0d8552d52b7fe170f24b632c4432ad677812321ababa1e pid=1751 runtime=io.containerd.runc.v2 Oct 2 18:45:32.413385 systemd[1]: Started cri-containerd-a1c3386cd8868e6f8b0d8552d52b7fe170f24b632c4432ad677812321ababa1e.scope. Oct 2 18:45:32.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.416000 audit: BPF prog-id=61 op=LOAD Oct 2 18:45:32.417000 audit[1760]: AVC avc: denied { bpf } for pid=1760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.417000 audit[1760]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000149b38 a2=10 a3=0 items=0 ppid=1752 pid=1760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435643132656432366561353737336163373164613565383039363432 Oct 2 18:45:32.417000 audit[1760]: AVC avc: denied { perfmon } for pid=1760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.417000 audit[1760]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001495a0 a2=3c a3=0 items=0 ppid=1752 pid=1760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435643132656432366561353737336163373164613565383039363432 Oct 2 18:45:32.417000 audit[1760]: AVC avc: denied { bpf } for pid=1760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.417000 audit[1760]: AVC avc: denied { bpf } for pid=1760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.417000 audit[1760]: AVC avc: denied { bpf } for pid=1760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.417000 audit[1760]: AVC avc: denied { perfmon } for pid=1760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.417000 audit[1760]: AVC avc: denied { perfmon } for pid=1760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.417000 audit[1760]: AVC avc: denied { perfmon } for pid=1760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.417000 audit[1760]: AVC avc: denied { perfmon } for pid=1760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.417000 audit[1760]: AVC avc: denied { perfmon } for pid=1760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.417000 audit[1760]: AVC avc: denied { bpf } for pid=1760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.417000 audit[1760]: AVC avc: denied { bpf } for pid=1760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.417000 audit: BPF prog-id=62 op=LOAD Oct 2 18:45:32.417000 audit[1760]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001498e0 a2=78 a3=0 items=0 ppid=1752 pid=1760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435643132656432366561353737336163373164613565383039363432 Oct 2 18:45:32.418000 audit[1760]: AVC avc: denied { bpf } for pid=1760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.418000 audit[1760]: AVC avc: denied { bpf } for pid=1760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.418000 audit[1760]: AVC avc: denied { perfmon } for pid=1760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.418000 audit[1760]: AVC avc: denied { perfmon } for pid=1760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.418000 audit[1760]: AVC avc: denied { perfmon } for pid=1760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.418000 audit[1760]: AVC avc: denied { perfmon } for pid=1760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.418000 audit[1760]: AVC avc: denied { perfmon } for pid=1760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.418000 audit[1760]: AVC avc: denied { bpf } for pid=1760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.418000 audit[1760]: AVC avc: denied { bpf } for pid=1760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.418000 audit: BPF prog-id=63 op=LOAD Oct 2 18:45:32.418000 audit[1760]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000149670 a2=78 a3=0 items=0 ppid=1752 pid=1760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.418000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435643132656432366561353737336163373164613565383039363432 Oct 2 18:45:32.418000 audit: BPF prog-id=63 op=UNLOAD Oct 2 18:45:32.418000 audit: BPF prog-id=62 op=UNLOAD Oct 2 18:45:32.418000 audit[1760]: AVC avc: denied { bpf } for pid=1760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.418000 audit[1760]: AVC avc: denied { bpf } for pid=1760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.418000 audit[1760]: AVC avc: denied { bpf } for pid=1760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.418000 audit[1760]: AVC avc: denied { perfmon } for pid=1760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.418000 audit[1760]: AVC avc: denied { perfmon } for pid=1760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.418000 audit[1760]: AVC avc: denied { perfmon } for pid=1760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.418000 audit[1760]: AVC avc: denied { perfmon } for pid=1760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.418000 audit[1760]: AVC avc: denied { perfmon } for pid=1760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.418000 audit[1760]: AVC avc: denied { bpf } for pid=1760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.418000 audit[1760]: AVC avc: denied { bpf } for pid=1760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.418000 audit: BPF prog-id=64 op=LOAD Oct 2 18:45:32.418000 audit[1760]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000149b40 a2=78 a3=0 items=0 ppid=1752 pid=1760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.418000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435643132656432366561353737336163373164613565383039363432 Oct 2 18:45:32.422917 systemd[1]: Started cri-containerd-b600172a76f557f84e90af1df6956df15320bae5731c7c067c8a8eb4abf54f93.scope. Oct 2 18:45:32.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.441969 kubelet[1665]: W1002 18:45:32.441882 1665 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.18:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Oct 2 18:45:32.441969 kubelet[1665]: E1002 18:45:32.441943 1665 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.18:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Oct 2 18:45:32.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.440000 audit: BPF prog-id=65 op=LOAD Oct 2 18:45:32.442000 audit[1800]: AVC avc: denied { bpf } for pid=1800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.442000 audit[1800]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1751 pid=1800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.442000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131633333383663643838363865366638623064383535326435326237 Oct 2 18:45:32.442000 audit[1800]: AVC avc: denied { perfmon } for pid=1800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.442000 audit[1800]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1751 pid=1800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.442000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131633333383663643838363865366638623064383535326435326237 Oct 2 18:45:32.442000 audit[1800]: AVC avc: denied { bpf } for pid=1800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.442000 audit[1800]: AVC avc: denied { bpf } for pid=1800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.442000 audit[1800]: AVC avc: denied { bpf } for pid=1800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.442000 audit[1800]: AVC avc: denied { perfmon } for pid=1800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.442000 audit[1800]: AVC avc: denied { perfmon } for pid=1800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.442000 audit[1800]: AVC avc: denied { perfmon } for pid=1800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.442000 audit[1800]: AVC avc: denied { perfmon } for pid=1800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.442000 audit[1800]: AVC avc: denied { perfmon } for pid=1800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.442000 audit[1800]: AVC avc: denied { bpf } for pid=1800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.442000 audit[1800]: AVC avc: denied { bpf } for pid=1800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.442000 audit: BPF prog-id=66 op=LOAD Oct 2 18:45:32.442000 audit[1800]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1751 pid=1800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.442000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131633333383663643838363865366638623064383535326435326237 Oct 2 18:45:32.444000 audit[1800]: AVC avc: denied { bpf } for pid=1800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.444000 audit[1800]: AVC avc: denied { bpf } for pid=1800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.444000 audit[1800]: AVC avc: denied { perfmon } for pid=1800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.444000 audit[1800]: AVC avc: denied { perfmon } for pid=1800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.444000 audit[1800]: AVC avc: denied { perfmon } for pid=1800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.444000 audit[1800]: AVC avc: denied { perfmon } for pid=1800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.444000 audit[1800]: AVC avc: denied { perfmon } for pid=1800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.444000 audit[1800]: AVC avc: denied { bpf } for pid=1800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.444000 audit[1800]: AVC avc: denied { bpf } for pid=1800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.444000 audit: BPF prog-id=67 op=LOAD Oct 2 18:45:32.444000 audit[1800]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1751 pid=1800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131633333383663643838363865366638623064383535326435326237 Oct 2 18:45:32.444000 audit: BPF prog-id=67 op=UNLOAD Oct 2 18:45:32.444000 audit: BPF prog-id=66 op=UNLOAD Oct 2 18:45:32.444000 audit[1800]: AVC avc: denied { bpf } for pid=1800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.444000 audit[1800]: AVC avc: denied { bpf } for pid=1800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.444000 audit[1800]: AVC avc: denied { bpf } for pid=1800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.444000 audit[1800]: AVC avc: denied { perfmon } for pid=1800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.444000 audit[1800]: AVC avc: denied { perfmon } for pid=1800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.444000 audit[1800]: AVC avc: denied { perfmon } for pid=1800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.444000 audit[1800]: AVC avc: denied { perfmon } for pid=1800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.444000 audit[1800]: AVC avc: denied { perfmon } for pid=1800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.444000 audit[1800]: AVC avc: denied { bpf } for pid=1800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.444000 audit[1800]: AVC avc: denied { bpf } for pid=1800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.444000 audit: BPF prog-id=68 op=LOAD Oct 2 18:45:32.444000 audit[1800]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1751 pid=1800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131633333383663643838363865366638623064383535326435326237 Oct 2 18:45:32.468928 env[1139]: time="2023-10-02T18:45:32.468872124Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:8339bc550a594e1c9482d80cfa770333,Namespace:kube-system,Attempt:0,} returns sandbox id \"45d12ed26ea5773ac71da5e809642d1f94a0766f3e2d22997d7c05e0a68ec10a\"" Oct 2 18:45:32.470040 kubelet[1665]: E1002 18:45:32.469844 1665 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:32.472097 env[1139]: time="2023-10-02T18:45:32.471208004Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:b3fbb6a05b0456c4809ee638aa5cfabe,Namespace:kube-system,Attempt:0,} returns sandbox id \"a1c3386cd8868e6f8b0d8552d52b7fe170f24b632c4432ad677812321ababa1e\"" Oct 2 18:45:32.478023 env[1139]: time="2023-10-02T18:45:32.477962888Z" level=info msg="CreateContainer within sandbox \"45d12ed26ea5773ac71da5e809642d1f94a0766f3e2d22997d7c05e0a68ec10a\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 18:45:32.478340 kubelet[1665]: E1002 18:45:32.478312 1665 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:32.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.478000 audit: BPF prog-id=69 op=LOAD Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000245b38 a2=10 a3=0 items=0 ppid=1787 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236303031373261373666353537663834653930616631646636393536 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40002455a0 a2=3c a3=0 items=0 ppid=1787 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236303031373261373666353537663834653930616631646636393536 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit: BPF prog-id=70 op=LOAD Oct 2 18:45:32.479000 audit[1799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40002458e0 a2=78 a3=0 items=0 ppid=1787 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236303031373261373666353537663834653930616631646636393536 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit: BPF prog-id=71 op=LOAD Oct 2 18:45:32.479000 audit[1799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000245670 a2=78 a3=0 items=0 ppid=1787 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236303031373261373666353537663834653930616631646636393536 Oct 2 18:45:32.479000 audit: BPF prog-id=71 op=UNLOAD Oct 2 18:45:32.479000 audit: BPF prog-id=70 op=UNLOAD Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.479000 audit: BPF prog-id=72 op=LOAD Oct 2 18:45:32.479000 audit[1799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000245b40 a2=78 a3=0 items=0 ppid=1787 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236303031373261373666353537663834653930616631646636393536 Oct 2 18:45:32.484556 env[1139]: time="2023-10-02T18:45:32.484505223Z" level=info msg="CreateContainer within sandbox \"a1c3386cd8868e6f8b0d8552d52b7fe170f24b632c4432ad677812321ababa1e\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 18:45:32.501706 env[1139]: time="2023-10-02T18:45:32.501663331Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:fbbee22b6941d370b4e7de3cf42df07f,Namespace:kube-system,Attempt:0,} returns sandbox id \"b600172a76f557f84e90af1df6956df15320bae5731c7c067c8a8eb4abf54f93\"" Oct 2 18:45:32.502541 kubelet[1665]: E1002 18:45:32.502513 1665 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:32.504298 env[1139]: time="2023-10-02T18:45:32.504257646Z" level=info msg="CreateContainer within sandbox \"b600172a76f557f84e90af1df6956df15320bae5731c7c067c8a8eb4abf54f93\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 18:45:32.520488 env[1139]: time="2023-10-02T18:45:32.520399134Z" level=info msg="CreateContainer within sandbox \"a1c3386cd8868e6f8b0d8552d52b7fe170f24b632c4432ad677812321ababa1e\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"c9eb843efe082cf1b6583629de482dd5df08e6eaa1fdad46a0e44b824ad1a028\"" Oct 2 18:45:32.521255 env[1139]: time="2023-10-02T18:45:32.521221487Z" level=info msg="StartContainer for \"c9eb843efe082cf1b6583629de482dd5df08e6eaa1fdad46a0e44b824ad1a028\"" Oct 2 18:45:32.522710 env[1139]: time="2023-10-02T18:45:32.522672485Z" level=info msg="CreateContainer within sandbox \"45d12ed26ea5773ac71da5e809642d1f94a0766f3e2d22997d7c05e0a68ec10a\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"5559d9b60e739b06a4201f88d5663eac152a6426f953f534724e3f0a9b6ca3a8\"" Oct 2 18:45:32.523207 env[1139]: time="2023-10-02T18:45:32.523179074Z" level=info msg="StartContainer for \"5559d9b60e739b06a4201f88d5663eac152a6426f953f534724e3f0a9b6ca3a8\"" Oct 2 18:45:32.530687 env[1139]: time="2023-10-02T18:45:32.530632414Z" level=info msg="CreateContainer within sandbox \"b600172a76f557f84e90af1df6956df15320bae5731c7c067c8a8eb4abf54f93\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"223831892b41115c3cbfceb57a0ed5a3124307d97ffae97c0527041f9676d3c2\"" Oct 2 18:45:32.531236 env[1139]: time="2023-10-02T18:45:32.531206733Z" level=info msg="StartContainer for \"223831892b41115c3cbfceb57a0ed5a3124307d97ffae97c0527041f9676d3c2\"" Oct 2 18:45:32.539665 systemd[1]: Started cri-containerd-c9eb843efe082cf1b6583629de482dd5df08e6eaa1fdad46a0e44b824ad1a028.scope. Oct 2 18:45:32.545568 systemd[1]: Started cri-containerd-5559d9b60e739b06a4201f88d5663eac152a6426f953f534724e3f0a9b6ca3a8.scope. Oct 2 18:45:32.575650 systemd[1]: Started cri-containerd-223831892b41115c3cbfceb57a0ed5a3124307d97ffae97c0527041f9676d3c2.scope. Oct 2 18:45:32.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.576000 audit: BPF prog-id=73 op=LOAD Oct 2 18:45:32.576000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.576000 audit[1883]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1752 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535353964396236306537333962303661343230316638386435363633 Oct 2 18:45:32.577000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.577000 audit[1883]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1752 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.577000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535353964396236306537333962303661343230316638386435363633 Oct 2 18:45:32.577000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.577000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.577000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.577000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.577000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.577000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.577000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.577000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.577000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.577000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.577000 audit: BPF prog-id=74 op=LOAD Oct 2 18:45:32.577000 audit[1883]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1752 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.577000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535353964396236306537333962303661343230316638386435363633 Oct 2 18:45:32.579000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.579000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.579000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.579000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.579000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.579000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.579000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.579000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.579000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.579000 audit: BPF prog-id=75 op=LOAD Oct 2 18:45:32.579000 audit[1883]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1752 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.579000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535353964396236306537333962303661343230316638386435363633 Oct 2 18:45:32.579000 audit: BPF prog-id=75 op=UNLOAD Oct 2 18:45:32.579000 audit: BPF prog-id=74 op=UNLOAD Oct 2 18:45:32.579000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.579000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.579000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.579000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.579000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.579000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.579000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.579000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.579000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.579000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.579000 audit: BPF prog-id=76 op=LOAD Oct 2 18:45:32.579000 audit[1883]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1752 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.579000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535353964396236306537333962303661343230316638386435363633 Oct 2 18:45:32.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.586000 audit: BPF prog-id=77 op=LOAD Oct 2 18:45:32.586000 audit[1882]: AVC avc: denied { bpf } for pid=1882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.586000 audit[1882]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=1751 pid=1882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339656238343365666530383263663162363538333632396465343832 Oct 2 18:45:32.587000 audit[1882]: AVC avc: denied { perfmon } for pid=1882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.587000 audit[1882]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=1751 pid=1882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339656238343365666530383263663162363538333632396465343832 Oct 2 18:45:32.587000 audit[1882]: AVC avc: denied { bpf } for pid=1882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.587000 audit[1882]: AVC avc: denied { bpf } for pid=1882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.587000 audit[1882]: AVC avc: denied { bpf } for pid=1882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.587000 audit[1882]: AVC avc: denied { perfmon } for pid=1882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.587000 audit[1882]: AVC avc: denied { perfmon } for pid=1882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.587000 audit[1882]: AVC avc: denied { perfmon } for pid=1882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.587000 audit[1882]: AVC avc: denied { perfmon } for pid=1882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.587000 audit[1882]: AVC avc: denied { perfmon } for pid=1882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.587000 audit[1882]: AVC avc: denied { bpf } for pid=1882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.587000 audit[1882]: AVC avc: denied { bpf } for pid=1882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.587000 audit: BPF prog-id=78 op=LOAD Oct 2 18:45:32.587000 audit[1882]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=1751 pid=1882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339656238343365666530383263663162363538333632396465343832 Oct 2 18:45:32.588000 audit[1882]: AVC avc: denied { bpf } for pid=1882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.588000 audit[1882]: AVC avc: denied { bpf } for pid=1882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.588000 audit[1882]: AVC avc: denied { perfmon } for pid=1882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.588000 audit[1882]: AVC avc: denied { perfmon } for pid=1882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.588000 audit[1882]: AVC avc: denied { perfmon } for pid=1882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.588000 audit[1882]: AVC avc: denied { perfmon } for pid=1882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.588000 audit[1882]: AVC avc: denied { perfmon } for pid=1882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.588000 audit[1882]: AVC avc: denied { bpf } for pid=1882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.588000 audit[1882]: AVC avc: denied { bpf } for pid=1882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.588000 audit: BPF prog-id=79 op=LOAD Oct 2 18:45:32.588000 audit[1882]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=1751 pid=1882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.588000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339656238343365666530383263663162363538333632396465343832 Oct 2 18:45:32.589000 audit: BPF prog-id=79 op=UNLOAD Oct 2 18:45:32.589000 audit: BPF prog-id=78 op=UNLOAD Oct 2 18:45:32.589000 audit[1882]: AVC avc: denied { bpf } for pid=1882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.589000 audit[1882]: AVC avc: denied { bpf } for pid=1882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.589000 audit[1882]: AVC avc: denied { bpf } for pid=1882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.589000 audit[1882]: AVC avc: denied { perfmon } for pid=1882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.589000 audit[1882]: AVC avc: denied { perfmon } for pid=1882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.589000 audit[1882]: AVC avc: denied { perfmon } for pid=1882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.589000 audit[1882]: AVC avc: denied { perfmon } for pid=1882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.589000 audit[1882]: AVC avc: denied { perfmon } for pid=1882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.589000 audit[1882]: AVC avc: denied { bpf } for pid=1882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.589000 audit[1882]: AVC avc: denied { bpf } for pid=1882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.589000 audit: BPF prog-id=80 op=LOAD Oct 2 18:45:32.589000 audit[1882]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=1751 pid=1882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339656238343365666530383263663162363538333632396465343832 Oct 2 18:45:32.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.593000 audit: BPF prog-id=81 op=LOAD Oct 2 18:45:32.594000 audit[1909]: AVC avc: denied { bpf } for pid=1909 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.594000 audit[1909]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=1787 pid=1909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.594000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232333833313839326234313131356333636266636562353761306564 Oct 2 18:45:32.594000 audit[1909]: AVC avc: denied { perfmon } for pid=1909 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.594000 audit[1909]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=1787 pid=1909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.594000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232333833313839326234313131356333636266636562353761306564 Oct 2 18:45:32.595000 audit[1909]: AVC avc: denied { bpf } for pid=1909 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.595000 audit[1909]: AVC avc: denied { bpf } for pid=1909 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.595000 audit[1909]: AVC avc: denied { bpf } for pid=1909 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.595000 audit[1909]: AVC avc: denied { perfmon } for pid=1909 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.595000 audit[1909]: AVC avc: denied { perfmon } for pid=1909 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.595000 audit[1909]: AVC avc: denied { perfmon } for pid=1909 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.595000 audit[1909]: AVC avc: denied { perfmon } for pid=1909 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.595000 audit[1909]: AVC avc: denied { perfmon } for pid=1909 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.595000 audit[1909]: AVC avc: denied { bpf } for pid=1909 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.595000 audit[1909]: AVC avc: denied { bpf } for pid=1909 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.595000 audit: BPF prog-id=82 op=LOAD Oct 2 18:45:32.595000 audit[1909]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=1787 pid=1909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232333833313839326234313131356333636266636562353761306564 Oct 2 18:45:32.595000 audit[1909]: AVC avc: denied { bpf } for pid=1909 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.595000 audit[1909]: AVC avc: denied { bpf } for pid=1909 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.595000 audit[1909]: AVC avc: denied { perfmon } for pid=1909 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.595000 audit[1909]: AVC avc: denied { perfmon } for pid=1909 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.595000 audit[1909]: AVC avc: denied { perfmon } for pid=1909 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.595000 audit[1909]: AVC avc: denied { perfmon } for pid=1909 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.595000 audit[1909]: AVC avc: denied { perfmon } for pid=1909 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.595000 audit[1909]: AVC avc: denied { bpf } for pid=1909 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.595000 audit[1909]: AVC avc: denied { bpf } for pid=1909 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.595000 audit: BPF prog-id=83 op=LOAD Oct 2 18:45:32.595000 audit[1909]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=1787 pid=1909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232333833313839326234313131356333636266636562353761306564 Oct 2 18:45:32.596000 audit: BPF prog-id=83 op=UNLOAD Oct 2 18:45:32.596000 audit: BPF prog-id=82 op=UNLOAD Oct 2 18:45:32.596000 audit[1909]: AVC avc: denied { bpf } for pid=1909 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.596000 audit[1909]: AVC avc: denied { bpf } for pid=1909 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.596000 audit[1909]: AVC avc: denied { bpf } for pid=1909 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.596000 audit[1909]: AVC avc: denied { perfmon } for pid=1909 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.596000 audit[1909]: AVC avc: denied { perfmon } for pid=1909 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.596000 audit[1909]: AVC avc: denied { perfmon } for pid=1909 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.596000 audit[1909]: AVC avc: denied { perfmon } for pid=1909 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.596000 audit[1909]: AVC avc: denied { perfmon } for pid=1909 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.596000 audit[1909]: AVC avc: denied { bpf } for pid=1909 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.596000 audit[1909]: AVC avc: denied { bpf } for pid=1909 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:32.596000 audit: BPF prog-id=84 op=LOAD Oct 2 18:45:32.596000 audit[1909]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=1787 pid=1909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:32.599335 kubelet[1665]: E1002 18:45:32.599269 1665 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://10.0.0.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.18:6443: connect: connection refused Oct 2 18:45:32.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232333833313839326234313131356333636266636562353761306564 Oct 2 18:45:32.616436 env[1139]: time="2023-10-02T18:45:32.616323538Z" level=info msg="StartContainer for \"5559d9b60e739b06a4201f88d5663eac152a6426f953f534724e3f0a9b6ca3a8\" returns successfully" Oct 2 18:45:32.617393 kubelet[1665]: W1002 18:45:32.617270 1665 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Oct 2 18:45:32.617393 kubelet[1665]: E1002 18:45:32.617341 1665 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Oct 2 18:45:32.654615 env[1139]: time="2023-10-02T18:45:32.654549248Z" level=info msg="StartContainer for \"c9eb843efe082cf1b6583629de482dd5df08e6eaa1fdad46a0e44b824ad1a028\" returns successfully" Oct 2 18:45:32.662074 kubelet[1665]: W1002 18:45:32.661965 1665 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Oct 2 18:45:32.662074 kubelet[1665]: E1002 18:45:32.662045 1665 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Oct 2 18:45:32.683477 env[1139]: time="2023-10-02T18:45:32.680059498Z" level=info msg="StartContainer for \"223831892b41115c3cbfceb57a0ed5a3124307d97ffae97c0527041f9676d3c2\" returns successfully" Oct 2 18:45:32.703211 kubelet[1665]: I1002 18:45:32.702842 1665 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 18:45:32.703211 kubelet[1665]: E1002 18:45:32.703165 1665 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.18:6443/api/v1/nodes\": dial tcp 10.0.0.18:6443: connect: connection refused" node="localhost" Oct 2 18:45:33.288381 kubelet[1665]: E1002 18:45:33.288339 1665 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:33.291569 kubelet[1665]: E1002 18:45:33.291544 1665 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:33.293871 kubelet[1665]: E1002 18:45:33.293840 1665 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:34.192000 audit[1915]: AVC avc: denied { watch } for pid=1915 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:45:34.192000 audit[1915]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40000524b0 a2=fc6 a3=0 items=0 ppid=1751 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 key=(null) Oct 2 18:45:34.192000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:45:34.192000 audit[1915]: AVC avc: denied { watch } for pid=1915 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7052 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:45:34.192000 audit[1915]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000250060 a2=fc6 a3=0 items=0 ppid=1751 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 key=(null) Oct 2 18:45:34.192000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:45:34.296781 kubelet[1665]: E1002 18:45:34.296611 1665 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:34.296781 kubelet[1665]: E1002 18:45:34.296713 1665 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:34.297248 kubelet[1665]: E1002 18:45:34.297222 1665 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:34.305419 kubelet[1665]: I1002 18:45:34.304903 1665 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 18:45:34.702000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:45:34.702000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=4006d2e120 a2=fc6 a3=0 items=0 ppid=1752 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 key=(null) Oct 2 18:45:34.702000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 18:45:34.702000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7052 scontext=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:45:34.702000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=4002d321c0 a2=fc6 a3=0 items=0 ppid=1752 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 key=(null) Oct 2 18:45:34.702000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 18:45:34.703000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7054 scontext=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:45:34.703000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=400a36de00 a2=fc6 a3=0 items=0 ppid=1752 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 key=(null) Oct 2 18:45:34.703000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 18:45:34.706000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7052 scontext=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:45:34.706000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4002d96b60 a2=fc6 a3=0 items=0 ppid=1752 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 key=(null) Oct 2 18:45:34.706000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 18:45:34.706000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:45:34.706000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4005aecf30 a2=fc6 a3=0 items=0 ppid=1752 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 key=(null) Oct 2 18:45:34.706000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 18:45:34.725000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7060 scontext=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:45:34.725000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8b a1=400a85c060 a2=fc6 a3=0 items=0 ppid=1752 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 key=(null) Oct 2 18:45:34.725000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 18:45:34.786735 kubelet[1665]: E1002 18:45:34.786698 1665 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Oct 2 18:45:34.998623 kubelet[1665]: I1002 18:45:34.998354 1665 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 18:45:35.062859 kubelet[1665]: E1002 18:45:35.062819 1665 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 18:45:35.163132 kubelet[1665]: E1002 18:45:35.163076 1665 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 18:45:35.264330 kubelet[1665]: E1002 18:45:35.264202 1665 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 18:45:35.297959 kubelet[1665]: E1002 18:45:35.297925 1665 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:35.364782 kubelet[1665]: E1002 18:45:35.364714 1665 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 18:45:36.187373 kubelet[1665]: I1002 18:45:36.187323 1665 apiserver.go:52] "Watching apiserver" Oct 2 18:45:36.195912 kubelet[1665]: I1002 18:45:36.195860 1665 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 18:45:36.217913 kubelet[1665]: E1002 18:45:36.217866 1665 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:36.228577 kubelet[1665]: I1002 18:45:36.228413 1665 reconciler.go:41] "Reconciler: start to sync state" Oct 2 18:45:36.299527 kubelet[1665]: E1002 18:45:36.299486 1665 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:36.302758 kubelet[1665]: E1002 18:45:36.302713 1665 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:37.300132 kubelet[1665]: E1002 18:45:37.300101 1665 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:37.841531 kubelet[1665]: E1002 18:45:37.841488 1665 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:37.889000 audit[1915]: AVC avc: denied { watch } for pid=1915 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32572 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 18:45:37.890639 kernel: kauditd_printk_skb: 644 callbacks suppressed Oct 2 18:45:37.890698 kernel: audit: type=1400 audit(1696272337.889:705): avc: denied { watch } for pid=1915 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32572 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 18:45:37.889000 audit[1915]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001226840 a2=fc6 a3=0 items=0 ppid=1751 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 key=(null) Oct 2 18:45:37.895923 kernel: audit: type=1300 audit(1696272337.889:705): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001226840 a2=fc6 a3=0 items=0 ppid=1751 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 key=(null) Oct 2 18:45:37.896010 kernel: audit: type=1327 audit(1696272337.889:705): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:45:37.889000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:45:38.306610 kubelet[1665]: E1002 18:45:38.302785 1665 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:39.429632 systemd[1]: Reloading. Oct 2 18:45:39.489878 /usr/lib/systemd/system-generators/torcx-generator[2007]: time="2023-10-02T18:45:39Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 18:45:39.489904 /usr/lib/systemd/system-generators/torcx-generator[2007]: time="2023-10-02T18:45:39Z" level=info msg="torcx already run" Oct 2 18:45:39.568536 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 18:45:39.568556 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 18:45:39.585714 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 18:45:39.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.649016 kernel: audit: type=1400 audit(1696272339.645:706): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.649089 kernel: audit: type=1400 audit(1696272339.645:707): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.649109 kernel: audit: type=1400 audit(1696272339.645:708): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.650671 kernel: audit: type=1400 audit(1696272339.645:709): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.652355 kernel: audit: type=1400 audit(1696272339.645:710): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.656625 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 18:45:39.656699 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 18:45:39.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.647000 audit: BPF prog-id=85 op=LOAD Oct 2 18:45:39.647000 audit: BPF prog-id=77 op=UNLOAD Oct 2 18:45:39.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.648000 audit: BPF prog-id=86 op=LOAD Oct 2 18:45:39.648000 audit: BPF prog-id=46 op=UNLOAD Oct 2 18:45:39.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.650000 audit: BPF prog-id=87 op=LOAD Oct 2 18:45:39.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.652000 audit: BPF prog-id=88 op=LOAD Oct 2 18:45:39.652000 audit: BPF prog-id=47 op=UNLOAD Oct 2 18:45:39.652000 audit: BPF prog-id=48 op=UNLOAD Oct 2 18:45:39.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.653000 audit: BPF prog-id=89 op=LOAD Oct 2 18:45:39.653000 audit: BPF prog-id=65 op=UNLOAD Oct 2 18:45:39.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.654000 audit: BPF prog-id=90 op=LOAD Oct 2 18:45:39.654000 audit: BPF prog-id=61 op=UNLOAD Oct 2 18:45:39.657000 audit: BPF prog-id=51 op=UNLOAD Oct 2 18:45:39.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit: BPF prog-id=94 op=LOAD Oct 2 18:45:39.658000 audit: BPF prog-id=52 op=UNLOAD Oct 2 18:45:39.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit: BPF prog-id=95 op=LOAD Oct 2 18:45:39.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.658000 audit: BPF prog-id=96 op=LOAD Oct 2 18:45:39.658000 audit: BPF prog-id=53 op=UNLOAD Oct 2 18:45:39.658000 audit: BPF prog-id=54 op=UNLOAD Oct 2 18:45:39.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.661000 audit: BPF prog-id=97 op=LOAD Oct 2 18:45:39.661000 audit: BPF prog-id=55 op=UNLOAD Oct 2 18:45:39.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.661000 audit: BPF prog-id=98 op=LOAD Oct 2 18:45:39.661000 audit: BPF prog-id=56 op=UNLOAD Oct 2 18:45:39.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.662000 audit: BPF prog-id=99 op=LOAD Oct 2 18:45:39.662000 audit: BPF prog-id=81 op=UNLOAD Oct 2 18:45:39.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit: BPF prog-id=100 op=LOAD Oct 2 18:45:39.663000 audit: BPF prog-id=57 op=UNLOAD Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit: BPF prog-id=101 op=LOAD Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit: BPF prog-id=102 op=LOAD Oct 2 18:45:39.663000 audit: BPF prog-id=58 op=UNLOAD Oct 2 18:45:39.663000 audit: BPF prog-id=59 op=UNLOAD Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.663000 audit: BPF prog-id=103 op=LOAD Oct 2 18:45:39.663000 audit: BPF prog-id=69 op=UNLOAD Oct 2 18:45:39.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.664000 audit: BPF prog-id=104 op=LOAD Oct 2 18:45:39.664000 audit: BPF prog-id=73 op=UNLOAD Oct 2 18:45:39.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.665000 audit: BPF prog-id=105 op=LOAD Oct 2 18:45:39.665000 audit: BPF prog-id=60 op=UNLOAD Oct 2 18:45:39.675189 systemd[1]: Stopping kubelet.service... Oct 2 18:45:39.699790 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 18:45:39.699989 systemd[1]: Stopped kubelet.service. Oct 2 18:45:39.699000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:39.701715 systemd[1]: Started kubelet.service. Oct 2 18:45:39.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:39.751387 kubelet[2045]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 18:45:39.751387 kubelet[2045]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 18:45:39.751731 kubelet[2045]: I1002 18:45:39.751439 2045 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 18:45:39.752839 kubelet[2045]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 18:45:39.752839 kubelet[2045]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 18:45:39.756500 kubelet[2045]: I1002 18:45:39.756478 2045 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 18:45:39.756606 kubelet[2045]: I1002 18:45:39.756596 2045 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 18:45:39.756863 kubelet[2045]: I1002 18:45:39.756846 2045 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 18:45:39.758230 kubelet[2045]: I1002 18:45:39.758198 2045 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 18:45:39.759120 kubelet[2045]: I1002 18:45:39.759087 2045 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 18:45:39.761732 kubelet[2045]: W1002 18:45:39.761715 2045 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 18:45:39.762506 kubelet[2045]: I1002 18:45:39.762491 2045 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 18:45:39.762707 kubelet[2045]: I1002 18:45:39.762697 2045 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 18:45:39.762812 kubelet[2045]: I1002 18:45:39.762799 2045 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 18:45:39.762897 kubelet[2045]: I1002 18:45:39.762818 2045 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 18:45:39.762897 kubelet[2045]: I1002 18:45:39.762829 2045 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 18:45:39.762897 kubelet[2045]: I1002 18:45:39.762868 2045 state_mem.go:36] "Initialized new in-memory state store" Oct 2 18:45:39.765639 kubelet[2045]: I1002 18:45:39.765619 2045 kubelet.go:398] "Attempting to sync node with API server" Oct 2 18:45:39.765703 kubelet[2045]: I1002 18:45:39.765648 2045 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 18:45:39.765703 kubelet[2045]: I1002 18:45:39.765683 2045 kubelet.go:297] "Adding apiserver pod source" Oct 2 18:45:39.765703 kubelet[2045]: I1002 18:45:39.765695 2045 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 18:45:39.770217 kubelet[2045]: I1002 18:45:39.770182 2045 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 18:45:39.770660 kubelet[2045]: I1002 18:45:39.770638 2045 server.go:1186] "Started kubelet" Oct 2 18:45:39.771000 audit[2045]: AVC avc: denied { mac_admin } for pid=2045 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.771000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:45:39.771000 audit[2045]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000cda570 a1=4000ea8210 a2=4000cda540 a3=25 items=0 ppid=1 pid=2045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:39.771000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:45:39.771000 audit[2045]: AVC avc: denied { mac_admin } for pid=2045 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.771000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:45:39.771000 audit[2045]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d54540 a1=4000ea8228 a2=4000cda600 a3=25 items=0 ppid=1 pid=2045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:39.771000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:45:39.771883 kubelet[2045]: I1002 18:45:39.771597 2045 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 18:45:39.771883 kubelet[2045]: I1002 18:45:39.771629 2045 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 18:45:39.771883 kubelet[2045]: I1002 18:45:39.771647 2045 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 18:45:39.771883 kubelet[2045]: I1002 18:45:39.771763 2045 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 18:45:39.772400 kubelet[2045]: I1002 18:45:39.772384 2045 server.go:451] "Adding debug handlers to kubelet server" Oct 2 18:45:39.773402 kubelet[2045]: I1002 18:45:39.772951 2045 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 18:45:39.773402 kubelet[2045]: I1002 18:45:39.773028 2045 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 18:45:39.773930 kubelet[2045]: E1002 18:45:39.773911 2045 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 18:45:39.773972 kubelet[2045]: E1002 18:45:39.773937 2045 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 18:45:39.818291 kubelet[2045]: I1002 18:45:39.818257 2045 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 18:45:39.830316 kubelet[2045]: I1002 18:45:39.830289 2045 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 18:45:39.830316 kubelet[2045]: I1002 18:45:39.830307 2045 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 18:45:39.830418 kubelet[2045]: I1002 18:45:39.830323 2045 state_mem.go:36] "Initialized new in-memory state store" Oct 2 18:45:39.830489 kubelet[2045]: I1002 18:45:39.830470 2045 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 18:45:39.830489 kubelet[2045]: I1002 18:45:39.830485 2045 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 18:45:39.830537 kubelet[2045]: I1002 18:45:39.830493 2045 policy_none.go:49] "None policy: Start" Oct 2 18:45:39.831010 kubelet[2045]: I1002 18:45:39.830991 2045 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 18:45:39.831067 kubelet[2045]: I1002 18:45:39.831030 2045 state_mem.go:35] "Initializing new in-memory state store" Oct 2 18:45:39.831158 kubelet[2045]: I1002 18:45:39.831143 2045 state_mem.go:75] "Updated machine memory state" Oct 2 18:45:39.832006 kubelet[2045]: I1002 18:45:39.831991 2045 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 18:45:39.832063 kubelet[2045]: I1002 18:45:39.832011 2045 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 18:45:39.832063 kubelet[2045]: I1002 18:45:39.832029 2045 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 18:45:39.832106 kubelet[2045]: E1002 18:45:39.832084 2045 kubelet.go:2137] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 18:45:39.836898 kubelet[2045]: I1002 18:45:39.836877 2045 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 18:45:39.836000 audit[2045]: AVC avc: denied { mac_admin } for pid=2045 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:39.836000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:45:39.836000 audit[2045]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400104ef90 a1=4001090a80 a2=400104ef60 a3=25 items=0 ppid=1 pid=2045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:39.836000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:45:39.837798 kubelet[2045]: I1002 18:45:39.837691 2045 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 18:45:39.838285 kubelet[2045]: I1002 18:45:39.838195 2045 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 18:45:39.892780 kubelet[2045]: I1002 18:45:39.892754 2045 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 18:45:39.914095 kubelet[2045]: I1002 18:45:39.912816 2045 kubelet_node_status.go:108] "Node was previously registered" node="localhost" Oct 2 18:45:39.914095 kubelet[2045]: I1002 18:45:39.912900 2045 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 18:45:39.943460 kubelet[2045]: I1002 18:45:39.932176 2045 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:45:39.943460 kubelet[2045]: I1002 18:45:39.932286 2045 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:45:39.943460 kubelet[2045]: I1002 18:45:39.932320 2045 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:45:39.943460 kubelet[2045]: E1002 18:45:39.941583 2045 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 2 18:45:39.973945 kubelet[2045]: I1002 18:45:39.973840 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 18:45:39.973945 kubelet[2045]: I1002 18:45:39.973889 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 18:45:39.973945 kubelet[2045]: I1002 18:45:39.973911 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 18:45:39.974100 kubelet[2045]: I1002 18:45:39.974024 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fbbee22b6941d370b4e7de3cf42df07f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"fbbee22b6941d370b4e7de3cf42df07f\") " pod="kube-system/kube-scheduler-localhost" Oct 2 18:45:39.974138 kubelet[2045]: I1002 18:45:39.974105 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8339bc550a594e1c9482d80cfa770333-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"8339bc550a594e1c9482d80cfa770333\") " pod="kube-system/kube-apiserver-localhost" Oct 2 18:45:39.974138 kubelet[2045]: I1002 18:45:39.974132 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 18:45:39.974180 kubelet[2045]: I1002 18:45:39.974159 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 18:45:39.974203 kubelet[2045]: I1002 18:45:39.974199 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8339bc550a594e1c9482d80cfa770333-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"8339bc550a594e1c9482d80cfa770333\") " pod="kube-system/kube-apiserver-localhost" Oct 2 18:45:39.974251 kubelet[2045]: I1002 18:45:39.974228 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8339bc550a594e1c9482d80cfa770333-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"8339bc550a594e1c9482d80cfa770333\") " pod="kube-system/kube-apiserver-localhost" Oct 2 18:45:39.976166 kubelet[2045]: E1002 18:45:39.976141 2045 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Oct 2 18:45:40.176276 kubelet[2045]: E1002 18:45:40.176235 2045 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 2 18:45:40.177397 kubelet[2045]: E1002 18:45:40.177379 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:40.242272 kubelet[2045]: E1002 18:45:40.242167 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:40.277437 kubelet[2045]: E1002 18:45:40.277406 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:40.766264 kubelet[2045]: I1002 18:45:40.766206 2045 apiserver.go:52] "Watching apiserver" Oct 2 18:45:40.774034 kubelet[2045]: I1002 18:45:40.773427 2045 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 18:45:40.778737 kubelet[2045]: I1002 18:45:40.778697 2045 reconciler.go:41] "Reconciler: start to sync state" Oct 2 18:45:40.838858 kubelet[2045]: E1002 18:45:40.838828 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:41.465947 kubelet[2045]: E1002 18:45:41.465911 2045 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 2 18:45:41.466231 kubelet[2045]: E1002 18:45:41.466211 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:41.500285 kubelet[2045]: E1002 18:45:41.500248 2045 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Oct 2 18:45:41.500718 kubelet[2045]: E1002 18:45:41.500700 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:41.840680 kubelet[2045]: E1002 18:45:41.840582 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:41.840963 kubelet[2045]: E1002 18:45:41.840709 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:41.841058 kubelet[2045]: E1002 18:45:41.841040 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:41.973978 kubelet[2045]: I1002 18:45:41.973944 2045 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=4.973904594 pod.CreationTimestamp="2023-10-02 18:45:37 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:45:41.588370004 +0000 UTC m=+1.880492533" watchObservedRunningTime="2023-10-02 18:45:41.973904594 +0000 UTC m=+2.266027123" Oct 2 18:45:42.372292 kubelet[2045]: I1002 18:45:42.372256 2045 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=6.372220508 pod.CreationTimestamp="2023-10-02 18:45:36 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:45:42.37168359 +0000 UTC m=+2.663806079" watchObservedRunningTime="2023-10-02 18:45:42.372220508 +0000 UTC m=+2.664343037" Oct 2 18:45:42.372459 kubelet[2045]: I1002 18:45:42.372355 2045 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=6.372338517 pod.CreationTimestamp="2023-10-02 18:45:36 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:45:41.974133571 +0000 UTC m=+2.266256140" watchObservedRunningTime="2023-10-02 18:45:42.372338517 +0000 UTC m=+2.664461046" Oct 2 18:45:42.841754 kubelet[2045]: E1002 18:45:42.841721 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:42.947639 update_engine[1130]: I1002 18:45:42.947239 1130 update_attempter.cc:505] Updating boot flags... Oct 2 18:45:43.324274 sudo[1264]: pam_unix(sudo:session): session closed for user root Oct 2 18:45:43.322000 audit[1264]: USER_END pid=1264 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:45:43.324856 kernel: kauditd_printk_skb: 317 callbacks suppressed Oct 2 18:45:43.324889 kernel: audit: type=1106 audit(1696272343.322:922): pid=1264 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:45:43.324000 audit[1264]: CRED_DISP pid=1264 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:45:43.327158 sshd[1261]: pam_unix(sshd:session): session closed for user core Oct 2 18:45:43.330428 kernel: audit: type=1104 audit(1696272343.324:923): pid=1264 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:45:43.326000 audit[1261]: USER_END pid=1261 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:45:43.331115 systemd[1]: sshd@6-10.0.0.18:22-10.0.0.1:47528.service: Deactivated successfully. Oct 2 18:45:43.331969 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 18:45:43.332146 systemd[1]: session-7.scope: Consumed 6.178s CPU time. Oct 2 18:45:43.332328 systemd-logind[1125]: Session 7 logged out. Waiting for processes to exit. Oct 2 18:45:43.332919 kernel: audit: type=1106 audit(1696272343.326:924): pid=1261 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:45:43.332963 kernel: audit: type=1104 audit(1696272343.326:925): pid=1261 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:45:43.326000 audit[1261]: CRED_DISP pid=1261 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:45:43.333105 systemd-logind[1125]: Removed session 7. Oct 2 18:45:43.330000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.18:22-10.0.0.1:47528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:43.336822 kernel: audit: type=1131 audit(1696272343.330:926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.18:22-10.0.0.1:47528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:45:43.842611 kubelet[2045]: E1002 18:45:43.842586 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:46.104440 kubelet[2045]: E1002 18:45:46.104394 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:46.848033 kubelet[2045]: E1002 18:45:46.846640 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:49.907492 kubelet[2045]: E1002 18:45:49.907367 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:50.076000 audit[1915]: AVC avc: denied { watch } for pid=1915 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7052 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:45:50.076000 audit[1915]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c90860 a2=fc6 a3=0 items=0 ppid=1751 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 key=(null) Oct 2 18:45:50.083150 kernel: audit: type=1400 audit(1696272350.076:927): avc: denied { watch } for pid=1915 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7052 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:45:50.083226 kernel: audit: type=1300 audit(1696272350.076:927): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c90860 a2=fc6 a3=0 items=0 ppid=1751 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 key=(null) Oct 2 18:45:50.083252 kernel: audit: type=1327 audit(1696272350.076:927): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:45:50.076000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:45:50.077000 audit[1915]: AVC avc: denied { watch } for pid=1915 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7052 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:45:50.087612 kernel: audit: type=1400 audit(1696272350.077:928): avc: denied { watch } for pid=1915 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7052 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:45:50.087654 kernel: audit: type=1300 audit(1696272350.077:928): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001230a00 a2=fc6 a3=0 items=0 ppid=1751 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 key=(null) Oct 2 18:45:50.077000 audit[1915]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001230a00 a2=fc6 a3=0 items=0 ppid=1751 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 key=(null) Oct 2 18:45:50.090452 kernel: audit: type=1327 audit(1696272350.077:928): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:45:50.077000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:45:50.077000 audit[1915]: AVC avc: denied { watch } for pid=1915 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7052 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:45:50.094799 kernel: audit: type=1400 audit(1696272350.077:929): avc: denied { watch } for pid=1915 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7052 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:45:50.094850 kernel: audit: type=1300 audit(1696272350.077:929): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001230b40 a2=fc6 a3=0 items=0 ppid=1751 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 key=(null) Oct 2 18:45:50.077000 audit[1915]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001230b40 a2=fc6 a3=0 items=0 ppid=1751 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 key=(null) Oct 2 18:45:50.097506 kernel: audit: type=1327 audit(1696272350.077:929): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:45:50.077000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:45:50.099722 kernel: audit: type=1400 audit(1696272350.078:930): avc: denied { watch } for pid=1915 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7052 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:45:50.078000 audit[1915]: AVC avc: denied { watch } for pid=1915 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7052 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:45:50.078000 audit[1915]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000bba7e0 a2=fc6 a3=0 items=0 ppid=1751 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 key=(null) Oct 2 18:45:50.078000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:45:50.669496 kubelet[2045]: I1002 18:45:50.669075 2045 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 18:45:50.669971 env[1139]: time="2023-10-02T18:45:50.669939551Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 18:45:50.670544 kubelet[2045]: I1002 18:45:50.670501 2045 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 18:45:50.852735 kubelet[2045]: E1002 18:45:50.852704 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:51.544198 kubelet[2045]: I1002 18:45:51.543529 2045 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:45:51.549886 systemd[1]: Created slice kubepods-besteffort-pod9127af26_99f6_415b_8750_9f46ade62598.slice. Oct 2 18:45:51.657327 kubelet[2045]: I1002 18:45:51.657279 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9127af26-99f6-415b-8750-9f46ade62598-lib-modules\") pod \"kube-proxy-klg9c\" (UID: \"9127af26-99f6-415b-8750-9f46ade62598\") " pod="kube-system/kube-proxy-klg9c" Oct 2 18:45:51.657485 kubelet[2045]: I1002 18:45:51.657353 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9127af26-99f6-415b-8750-9f46ade62598-xtables-lock\") pod \"kube-proxy-klg9c\" (UID: \"9127af26-99f6-415b-8750-9f46ade62598\") " pod="kube-system/kube-proxy-klg9c" Oct 2 18:45:51.657485 kubelet[2045]: I1002 18:45:51.657384 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jp6q6\" (UniqueName: \"kubernetes.io/projected/9127af26-99f6-415b-8750-9f46ade62598-kube-api-access-jp6q6\") pod \"kube-proxy-klg9c\" (UID: \"9127af26-99f6-415b-8750-9f46ade62598\") " pod="kube-system/kube-proxy-klg9c" Oct 2 18:45:51.657485 kubelet[2045]: I1002 18:45:51.657409 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/9127af26-99f6-415b-8750-9f46ade62598-kube-proxy\") pod \"kube-proxy-klg9c\" (UID: \"9127af26-99f6-415b-8750-9f46ade62598\") " pod="kube-system/kube-proxy-klg9c" Oct 2 18:45:51.700288 kubelet[2045]: I1002 18:45:51.700256 2045 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:45:51.706834 systemd[1]: Created slice kubepods-besteffort-pod6f141636_9b33_4bcd_80b0_8a1664766f1d.slice. Oct 2 18:45:51.853498 kubelet[2045]: E1002 18:45:51.853389 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:51.858506 kubelet[2045]: I1002 18:45:51.858468 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/6f141636-9b33-4bcd-80b0-8a1664766f1d-var-lib-calico\") pod \"tigera-operator-54b47459dd-85r9n\" (UID: \"6f141636-9b33-4bcd-80b0-8a1664766f1d\") " pod="tigera-operator/tigera-operator-54b47459dd-85r9n" Oct 2 18:45:51.858506 kubelet[2045]: I1002 18:45:51.858508 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hmsnq\" (UniqueName: \"kubernetes.io/projected/6f141636-9b33-4bcd-80b0-8a1664766f1d-kube-api-access-hmsnq\") pod \"tigera-operator-54b47459dd-85r9n\" (UID: \"6f141636-9b33-4bcd-80b0-8a1664766f1d\") " pod="tigera-operator/tigera-operator-54b47459dd-85r9n" Oct 2 18:45:51.860788 kubelet[2045]: E1002 18:45:51.860768 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:51.861310 env[1139]: time="2023-10-02T18:45:51.861266344Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-klg9c,Uid:9127af26-99f6-415b-8750-9f46ade62598,Namespace:kube-system,Attempt:0,}" Oct 2 18:45:51.876962 env[1139]: time="2023-10-02T18:45:51.876880971Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:45:51.876962 env[1139]: time="2023-10-02T18:45:51.876932733Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:45:51.876962 env[1139]: time="2023-10-02T18:45:51.876943773Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:45:51.877301 env[1139]: time="2023-10-02T18:45:51.877252066Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3781621c6a624cb009f8802181f0ac48ebb25c9564df7c62a6972c98956d3a66 pid=2176 runtime=io.containerd.runc.v2 Oct 2 18:45:51.890808 systemd[1]: Started cri-containerd-3781621c6a624cb009f8802181f0ac48ebb25c9564df7c62a6972c98956d3a66.scope. Oct 2 18:45:51.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.985000 audit: BPF prog-id=106 op=LOAD Oct 2 18:45:51.985000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.985000 audit[2186]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2176 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:51.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337383136323163366136323463623030396638383032313831663061 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2176 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:51.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337383136323163366136323463623030396638383032313831663061 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit: BPF prog-id=107 op=LOAD Oct 2 18:45:51.986000 audit[2186]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2176 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:51.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337383136323163366136323463623030396638383032313831663061 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit: BPF prog-id=108 op=LOAD Oct 2 18:45:51.986000 audit[2186]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2176 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:51.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337383136323163366136323463623030396638383032313831663061 Oct 2 18:45:51.986000 audit: BPF prog-id=108 op=UNLOAD Oct 2 18:45:51.986000 audit: BPF prog-id=107 op=UNLOAD Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:51.986000 audit: BPF prog-id=109 op=LOAD Oct 2 18:45:51.986000 audit[2186]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2176 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:51.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337383136323163366136323463623030396638383032313831663061 Oct 2 18:45:52.000559 env[1139]: time="2023-10-02T18:45:52.000494013Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-klg9c,Uid:9127af26-99f6-415b-8750-9f46ade62598,Namespace:kube-system,Attempt:0,} returns sandbox id \"3781621c6a624cb009f8802181f0ac48ebb25c9564df7c62a6972c98956d3a66\"" Oct 2 18:45:52.001577 kubelet[2045]: E1002 18:45:52.001551 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:52.005040 env[1139]: time="2023-10-02T18:45:52.004979102Z" level=info msg="CreateContainer within sandbox \"3781621c6a624cb009f8802181f0ac48ebb25c9564df7c62a6972c98956d3a66\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 18:45:52.010693 env[1139]: time="2023-10-02T18:45:52.010654316Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-54b47459dd-85r9n,Uid:6f141636-9b33-4bcd-80b0-8a1664766f1d,Namespace:tigera-operator,Attempt:0,}" Oct 2 18:45:52.021391 env[1139]: time="2023-10-02T18:45:52.021328397Z" level=info msg="CreateContainer within sandbox \"3781621c6a624cb009f8802181f0ac48ebb25c9564df7c62a6972c98956d3a66\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"17a23b36a5171cec0838a2eab2e3a4a7cba04d0903b34a5416a62a97ea2404bf\"" Oct 2 18:45:52.023641 env[1139]: time="2023-10-02T18:45:52.023603443Z" level=info msg="StartContainer for \"17a23b36a5171cec0838a2eab2e3a4a7cba04d0903b34a5416a62a97ea2404bf\"" Oct 2 18:45:52.031268 env[1139]: time="2023-10-02T18:45:52.031197169Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:45:52.031389 env[1139]: time="2023-10-02T18:45:52.031246371Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:45:52.031389 env[1139]: time="2023-10-02T18:45:52.031257491Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:45:52.031609 env[1139]: time="2023-10-02T18:45:52.031567983Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/33cb8c1272cb963b15cddf9f66892f5dc425c4f7c031790ee6802313444a2f99 pid=2222 runtime=io.containerd.runc.v2 Oct 2 18:45:52.041690 systemd[1]: Started cri-containerd-17a23b36a5171cec0838a2eab2e3a4a7cba04d0903b34a5416a62a97ea2404bf.scope. Oct 2 18:45:52.043771 systemd[1]: Started cri-containerd-33cb8c1272cb963b15cddf9f66892f5dc425c4f7c031790ee6802313444a2f99.scope. Oct 2 18:45:52.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.145000 audit: BPF prog-id=110 op=LOAD Oct 2 18:45:52.146000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.146000 audit[2239]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000149b38 a2=10 a3=0 items=0 ppid=2222 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333636238633132373263623936336231356364646639663636383932 Oct 2 18:45:52.146000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.146000 audit[2239]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001495a0 a2=3c a3=0 items=0 ppid=2222 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333636238633132373263623936336231356364646639663636383932 Oct 2 18:45:52.146000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.146000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.146000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.146000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.146000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.146000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.146000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.146000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.146000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.146000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.146000 audit: BPF prog-id=111 op=LOAD Oct 2 18:45:52.146000 audit[2239]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001498e0 a2=78 a3=0 items=0 ppid=2222 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333636238633132373263623936336231356364646639663636383932 Oct 2 18:45:52.146000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.146000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.146000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.146000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.146000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.146000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.146000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.146000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.146000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.146000 audit: BPF prog-id=112 op=LOAD Oct 2 18:45:52.146000 audit[2239]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000149670 a2=78 a3=0 items=0 ppid=2222 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333636238633132373263623936336231356364646639663636383932 Oct 2 18:45:52.146000 audit: BPF prog-id=112 op=UNLOAD Oct 2 18:45:52.146000 audit: BPF prog-id=111 op=UNLOAD Oct 2 18:45:52.147000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.147000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.147000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.147000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.147000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.147000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.147000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.147000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.147000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.147000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.147000 audit: BPF prog-id=113 op=LOAD Oct 2 18:45:52.147000 audit[2239]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000149b40 a2=78 a3=0 items=0 ppid=2222 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.147000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333636238633132373263623936336231356364646639663636383932 Oct 2 18:45:52.177000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.177000 audit[2233]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2176 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137613233623336613531373163656330383338613265616232653361 Oct 2 18:45:52.177000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.177000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.177000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.177000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.177000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.177000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.177000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.177000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.177000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.177000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.177000 audit: BPF prog-id=114 op=LOAD Oct 2 18:45:52.177000 audit[2233]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2176 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137613233623336613531373163656330383338613265616232653361 Oct 2 18:45:52.178000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.178000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.178000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.178000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.178000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.178000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.178000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.178000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.178000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.178000 audit: BPF prog-id=115 op=LOAD Oct 2 18:45:52.178000 audit[2233]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2176 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137613233623336613531373163656330383338613265616232653361 Oct 2 18:45:52.178000 audit: BPF prog-id=115 op=UNLOAD Oct 2 18:45:52.178000 audit: BPF prog-id=114 op=UNLOAD Oct 2 18:45:52.178000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.178000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.178000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.178000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.178000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.178000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.178000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.178000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.178000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.178000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:52.178000 audit: BPF prog-id=116 op=LOAD Oct 2 18:45:52.178000 audit[2233]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2176 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137613233623336613531373163656330383338613265616232653361 Oct 2 18:45:52.180601 env[1139]: time="2023-10-02T18:45:52.180561550Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-54b47459dd-85r9n,Uid:6f141636-9b33-4bcd-80b0-8a1664766f1d,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"33cb8c1272cb963b15cddf9f66892f5dc425c4f7c031790ee6802313444a2f99\"" Oct 2 18:45:52.182336 env[1139]: time="2023-10-02T18:45:52.182298936Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\"" Oct 2 18:45:52.202553 env[1139]: time="2023-10-02T18:45:52.202509176Z" level=info msg="StartContainer for \"17a23b36a5171cec0838a2eab2e3a4a7cba04d0903b34a5416a62a97ea2404bf\" returns successfully" Oct 2 18:45:52.331000 audit[2310]: NETFILTER_CFG table=mangle:59 family=10 entries=1 op=nft_register_chain pid=2310 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:52.331000 audit[2310]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffb88ea80 a2=0 a3=ffffbe4c76c0 items=0 ppid=2260 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.331000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 18:45:52.331000 audit[2311]: NETFILTER_CFG table=mangle:60 family=2 entries=1 op=nft_register_chain pid=2311 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:52.331000 audit[2311]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff09f3e50 a2=0 a3=ffff943cc6c0 items=0 ppid=2260 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.331000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 18:45:52.332000 audit[2313]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2313 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:52.332000 audit[2313]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd4d9d9c0 a2=0 a3=ffff963a26c0 items=0 ppid=2260 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.332000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 18:45:52.333000 audit[2314]: NETFILTER_CFG table=filter:62 family=2 entries=1 op=nft_register_chain pid=2314 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:52.333000 audit[2314]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd1240e80 a2=0 a3=ffffa8cf36c0 items=0 ppid=2260 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.333000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 18:45:52.335000 audit[2315]: NETFILTER_CFG table=nat:63 family=10 entries=1 op=nft_register_chain pid=2315 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:52.335000 audit[2315]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff25e6660 a2=0 a3=ffff923c66c0 items=0 ppid=2260 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.335000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 18:45:52.337000 audit[2316]: NETFILTER_CFG table=filter:64 family=10 entries=1 op=nft_register_chain pid=2316 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:52.337000 audit[2316]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffda41350 a2=0 a3=ffffbbb686c0 items=0 ppid=2260 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.337000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 18:45:52.433000 audit[2317]: NETFILTER_CFG table=filter:65 family=2 entries=1 op=nft_register_chain pid=2317 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:52.433000 audit[2317]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffcb744b70 a2=0 a3=ffffbd6c86c0 items=0 ppid=2260 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.433000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 18:45:52.437000 audit[2319]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_rule pid=2319 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:52.437000 audit[2319]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffd5ff16b0 a2=0 a3=ffff8f0286c0 items=0 ppid=2260 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.437000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 18:45:52.441000 audit[2322]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_rule pid=2322 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:52.441000 audit[2322]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffdd60aa30 a2=0 a3=ffffb39266c0 items=0 ppid=2260 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.441000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 18:45:52.442000 audit[2323]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=2323 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:52.442000 audit[2323]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd24fd5e0 a2=0 a3=ffffab4c46c0 items=0 ppid=2260 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.442000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 18:45:52.445000 audit[2325]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=2325 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:52.445000 audit[2325]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdcd89be0 a2=0 a3=ffffa8df96c0 items=0 ppid=2260 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.445000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 18:45:52.446000 audit[2326]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_chain pid=2326 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:52.446000 audit[2326]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc75cdbe0 a2=0 a3=ffffa20026c0 items=0 ppid=2260 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.446000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 18:45:52.448000 audit[2328]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=2328 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:52.448000 audit[2328]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff784bd30 a2=0 a3=ffffb51576c0 items=0 ppid=2260 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.448000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 18:45:52.452000 audit[2331]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=2331 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:52.452000 audit[2331]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc1e8afe0 a2=0 a3=ffffa3ba26c0 items=0 ppid=2260 pid=2331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.452000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 18:45:52.453000 audit[2332]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=2332 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:52.453000 audit[2332]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc53e7900 a2=0 a3=ffff963966c0 items=0 ppid=2260 pid=2332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.453000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 18:45:52.455000 audit[2334]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=2334 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:52.455000 audit[2334]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd4152d20 a2=0 a3=ffffba29e6c0 items=0 ppid=2260 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.455000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 18:45:52.457000 audit[2335]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_chain pid=2335 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:52.457000 audit[2335]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffeed6de30 a2=0 a3=ffff81fda6c0 items=0 ppid=2260 pid=2335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.457000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 18:45:52.459000 audit[2337]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=2337 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:52.459000 audit[2337]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc1b0aab0 a2=0 a3=ffffa6e226c0 items=0 ppid=2260 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.459000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 18:45:52.463000 audit[2340]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=2340 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:52.463000 audit[2340]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffea6f3340 a2=0 a3=ffff9cc2d6c0 items=0 ppid=2260 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.463000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 18:45:52.466000 audit[2343]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=2343 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:52.466000 audit[2343]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffda97ace0 a2=0 a3=ffff8a9ec6c0 items=0 ppid=2260 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.466000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 18:45:52.468000 audit[2344]: NETFILTER_CFG table=nat:79 family=2 entries=1 op=nft_register_chain pid=2344 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:52.468000 audit[2344]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffeb0a4220 a2=0 a3=ffff975936c0 items=0 ppid=2260 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.468000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 18:45:52.470000 audit[2346]: NETFILTER_CFG table=nat:80 family=2 entries=1 op=nft_register_rule pid=2346 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:52.470000 audit[2346]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffd4ebf150 a2=0 a3=ffffb93736c0 items=0 ppid=2260 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.470000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 18:45:52.474000 audit[2349]: NETFILTER_CFG table=nat:81 family=2 entries=1 op=nft_register_rule pid=2349 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:45:52.474000 audit[2349]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff5780940 a2=0 a3=ffffb18956c0 items=0 ppid=2260 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.474000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 18:45:52.484000 audit[2353]: NETFILTER_CFG table=filter:82 family=2 entries=6 op=nft_register_rule pid=2353 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:45:52.484000 audit[2353]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4028 a0=3 a1=ffffef6fd840 a2=0 a3=ffff81c976c0 items=0 ppid=2260 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.484000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:45:52.489000 audit[2353]: NETFILTER_CFG table=nat:83 family=2 entries=17 op=nft_register_chain pid=2353 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:45:52.489000 audit[2353]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffef6fd840 a2=0 a3=ffff81c976c0 items=0 ppid=2260 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.489000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:45:52.499000 audit[2358]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2358 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:52.499000 audit[2358]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffdbabd310 a2=0 a3=ffff816176c0 items=0 ppid=2260 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.499000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 18:45:52.501000 audit[2360]: NETFILTER_CFG table=filter:85 family=10 entries=2 op=nft_register_chain pid=2360 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:52.501000 audit[2360]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe63ab1c0 a2=0 a3=ffffaa8016c0 items=0 ppid=2260 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.501000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 18:45:52.505000 audit[2363]: NETFILTER_CFG table=filter:86 family=10 entries=2 op=nft_register_chain pid=2363 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:52.505000 audit[2363]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd9da8820 a2=0 a3=ffffbc5e06c0 items=0 ppid=2260 pid=2363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.505000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 18:45:52.506000 audit[2364]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=2364 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:52.506000 audit[2364]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd2d41460 a2=0 a3=ffffbce486c0 items=0 ppid=2260 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.506000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 18:45:52.509000 audit[2366]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=2366 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:52.509000 audit[2366]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffda08c70 a2=0 a3=ffff983bc6c0 items=0 ppid=2260 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.509000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 18:45:52.510000 audit[2367]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=2367 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:52.510000 audit[2367]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff872dc20 a2=0 a3=ffff813596c0 items=0 ppid=2260 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.510000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 18:45:52.513000 audit[2369]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=2369 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:52.513000 audit[2369]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffffbd286f0 a2=0 a3=ffffb5db16c0 items=0 ppid=2260 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.513000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 18:45:52.516000 audit[2372]: NETFILTER_CFG table=filter:91 family=10 entries=2 op=nft_register_chain pid=2372 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:52.516000 audit[2372]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffc4f5cb20 a2=0 a3=ffffb25696c0 items=0 ppid=2260 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.516000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 18:45:52.517000 audit[2373]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_chain pid=2373 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:52.517000 audit[2373]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff6f16420 a2=0 a3=ffffb344b6c0 items=0 ppid=2260 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.517000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 18:45:52.520000 audit[2375]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=2375 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:52.520000 audit[2375]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffd9574c0 a2=0 a3=ffffaec866c0 items=0 ppid=2260 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.520000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 18:45:52.521000 audit[2376]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_chain pid=2376 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:52.521000 audit[2376]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc6ea2e10 a2=0 a3=ffff976386c0 items=0 ppid=2260 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.521000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 18:45:52.523000 audit[2378]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_rule pid=2378 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:52.523000 audit[2378]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe72c2450 a2=0 a3=ffff96eac6c0 items=0 ppid=2260 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.523000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 18:45:52.527000 audit[2381]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_rule pid=2381 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:52.527000 audit[2381]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff1595b40 a2=0 a3=ffff8675b6c0 items=0 ppid=2260 pid=2381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.527000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 18:45:52.531000 audit[2384]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=2384 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:52.531000 audit[2384]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff602ee70 a2=0 a3=ffff8a3c06c0 items=0 ppid=2260 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.531000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 18:45:52.532000 audit[2385]: NETFILTER_CFG table=nat:98 family=10 entries=1 op=nft_register_chain pid=2385 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:52.532000 audit[2385]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffed250730 a2=0 a3=ffffac8056c0 items=0 ppid=2260 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.532000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 18:45:52.534000 audit[2387]: NETFILTER_CFG table=nat:99 family=10 entries=2 op=nft_register_chain pid=2387 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:52.534000 audit[2387]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffff8d33ae0 a2=0 a3=ffffa9cfb6c0 items=0 ppid=2260 pid=2387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.534000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 18:45:52.538000 audit[2390]: NETFILTER_CFG table=nat:100 family=10 entries=2 op=nft_register_chain pid=2390 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:45:52.538000 audit[2390]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=fffffc3c5000 a2=0 a3=ffff8e4336c0 items=0 ppid=2260 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.538000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 18:45:52.543000 audit[2394]: NETFILTER_CFG table=filter:101 family=10 entries=3 op=nft_register_rule pid=2394 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 18:45:52.543000 audit[2394]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffd34a1c30 a2=0 a3=ffffb470d6c0 items=0 ppid=2260 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.543000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:45:52.543000 audit[2394]: NETFILTER_CFG table=nat:102 family=10 entries=10 op=nft_register_chain pid=2394 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 18:45:52.543000 audit[2394]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffd34a1c30 a2=0 a3=ffffb470d6c0 items=0 ppid=2260 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:52.543000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:45:52.861475 kubelet[2045]: E1002 18:45:52.856172 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:52.865382 kubelet[2045]: I1002 18:45:52.865346 2045 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-klg9c" podStartSLOduration=1.865314722 pod.CreationTimestamp="2023-10-02 18:45:51 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:45:52.865236079 +0000 UTC m=+13.157358608" watchObservedRunningTime="2023-10-02 18:45:52.865314722 +0000 UTC m=+13.157437211" Oct 2 18:45:53.110417 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2309847730.mount: Deactivated successfully. Oct 2 18:45:53.699573 env[1139]: time="2023-10-02T18:45:53.699528674Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:53.700750 env[1139]: time="2023-10-02T18:45:53.700718316Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2bfa083ce51f1c757f20693cfea8ad121e2748f96a90fef52f087057eac59214,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:53.703631 env[1139]: time="2023-10-02T18:45:53.703594378Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:53.705020 env[1139]: time="2023-10-02T18:45:53.704993387Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:89eef35e1bbe8c88792ce69c3f3f38fb9838e58602c570524350b5f3ab127582,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:53.705668 env[1139]: time="2023-10-02T18:45:53.705632890Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\" returns image reference \"sha256:2bfa083ce51f1c757f20693cfea8ad121e2748f96a90fef52f087057eac59214\"" Oct 2 18:45:53.708434 env[1139]: time="2023-10-02T18:45:53.707774565Z" level=info msg="CreateContainer within sandbox \"33cb8c1272cb963b15cddf9f66892f5dc425c4f7c031790ee6802313444a2f99\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Oct 2 18:45:53.716325 env[1139]: time="2023-10-02T18:45:53.716291386Z" level=info msg="CreateContainer within sandbox \"33cb8c1272cb963b15cddf9f66892f5dc425c4f7c031790ee6802313444a2f99\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86\"" Oct 2 18:45:53.716819 env[1139]: time="2023-10-02T18:45:53.716794083Z" level=info msg="StartContainer for \"f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86\"" Oct 2 18:45:53.736869 systemd[1]: Started cri-containerd-f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86.scope. Oct 2 18:45:53.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.759000 audit: BPF prog-id=117 op=LOAD Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2222 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:53.760000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638643465663266656637383765643463646663333033326462633933 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2222 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:53.760000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638643465663266656637383765643463646663333033326462633933 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit: BPF prog-id=118 op=LOAD Oct 2 18:45:53.760000 audit[2403]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2222 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:53.760000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638643465663266656637383765643463646663333033326462633933 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit: BPF prog-id=119 op=LOAD Oct 2 18:45:53.760000 audit[2403]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2222 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:53.760000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638643465663266656637383765643463646663333033326462633933 Oct 2 18:45:53.760000 audit: BPF prog-id=119 op=UNLOAD Oct 2 18:45:53.760000 audit: BPF prog-id=118 op=UNLOAD Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:53.760000 audit: BPF prog-id=120 op=LOAD Oct 2 18:45:53.760000 audit[2403]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2222 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:53.760000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638643465663266656637383765643463646663333033326462633933 Oct 2 18:45:53.782761 env[1139]: time="2023-10-02T18:45:53.778664626Z" level=info msg="StartContainer for \"f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86\" returns successfully" Oct 2 18:45:53.860349 kubelet[2045]: E1002 18:45:53.860323 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:56.925000 audit[2459]: NETFILTER_CFG table=filter:103 family=2 entries=13 op=nft_register_rule pid=2459 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:45:56.928492 kernel: kauditd_printk_skb: 348 callbacks suppressed Oct 2 18:45:56.928541 kernel: audit: type=1325 audit(1696272356.925:1035): table=filter:103 family=2 entries=13 op=nft_register_rule pid=2459 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:45:56.928561 kernel: audit: type=1300 audit(1696272356.925:1035): arch=c00000b7 syscall=211 success=yes exit=4732 a0=3 a1=ffffd1a85750 a2=0 a3=ffff9f4bf6c0 items=0 ppid=2260 pid=2459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:56.925000 audit[2459]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4732 a0=3 a1=ffffd1a85750 a2=0 a3=ffff9f4bf6c0 items=0 ppid=2260 pid=2459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:56.925000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:45:56.932563 kernel: audit: type=1327 audit(1696272356.925:1035): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:45:56.926000 audit[2459]: NETFILTER_CFG table=nat:104 family=2 entries=20 op=nft_register_rule pid=2459 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:45:56.926000 audit[2459]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffd1a85750 a2=0 a3=ffff9f4bf6c0 items=0 ppid=2260 pid=2459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:56.944137 kernel: audit: type=1325 audit(1696272356.926:1036): table=nat:104 family=2 entries=20 op=nft_register_rule pid=2459 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:45:56.944200 kernel: audit: type=1300 audit(1696272356.926:1036): arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffd1a85750 a2=0 a3=ffff9f4bf6c0 items=0 ppid=2260 pid=2459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:56.926000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:45:56.945502 kernel: audit: type=1327 audit(1696272356.926:1036): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:45:56.972000 audit[2485]: NETFILTER_CFG table=filter:105 family=2 entries=14 op=nft_register_rule pid=2485 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:45:56.972000 audit[2485]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4732 a0=3 a1=ffffe182a8b0 a2=0 a3=ffff9ee316c0 items=0 ppid=2260 pid=2485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:56.977131 kernel: audit: type=1325 audit(1696272356.972:1037): table=filter:105 family=2 entries=14 op=nft_register_rule pid=2485 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:45:56.977169 kernel: audit: type=1300 audit(1696272356.972:1037): arch=c00000b7 syscall=211 success=yes exit=4732 a0=3 a1=ffffe182a8b0 a2=0 a3=ffff9ee316c0 items=0 ppid=2260 pid=2485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:56.977200 kernel: audit: type=1327 audit(1696272356.972:1037): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:45:56.972000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:45:56.973000 audit[2485]: NETFILTER_CFG table=nat:106 family=2 entries=20 op=nft_register_rule pid=2485 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:45:56.973000 audit[2485]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffe182a8b0 a2=0 a3=ffff9ee316c0 items=0 ppid=2260 pid=2485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:56.973000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:45:56.986457 kernel: audit: type=1325 audit(1696272356.973:1038): table=nat:106 family=2 entries=20 op=nft_register_rule pid=2485 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:45:57.125237 kubelet[2045]: I1002 18:45:57.125178 2045 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-54b47459dd-85r9n" podStartSLOduration=-9.22337203072964e+09 pod.CreationTimestamp="2023-10-02 18:45:51 +0000 UTC" firstStartedPulling="2023-10-02 18:45:52.181709194 +0000 UTC m=+12.473831723" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:45:53.868345951 +0000 UTC m=+14.160468480" watchObservedRunningTime="2023-10-02 18:45:57.125137597 +0000 UTC m=+17.417260086" Oct 2 18:45:57.125610 kubelet[2045]: I1002 18:45:57.125366 2045 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:45:57.130597 systemd[1]: Created slice kubepods-besteffort-pode1be2059_b274_4779_b69e_8ecde5212ade.slice. Oct 2 18:45:57.169900 kubelet[2045]: I1002 18:45:57.169866 2045 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:45:57.174898 systemd[1]: Created slice kubepods-besteffort-pod33477ebd_279d_4a8f_b897_f51161740c31.slice. Oct 2 18:45:57.202068 kubelet[2045]: I1002 18:45:57.200122 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/33477ebd-279d-4a8f-b897-f51161740c31-tigera-ca-bundle\") pod \"calico-node-qmpkh\" (UID: \"33477ebd-279d-4a8f-b897-f51161740c31\") " pod="calico-system/calico-node-qmpkh" Oct 2 18:45:57.202068 kubelet[2045]: I1002 18:45:57.200164 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/33477ebd-279d-4a8f-b897-f51161740c31-var-run-calico\") pod \"calico-node-qmpkh\" (UID: \"33477ebd-279d-4a8f-b897-f51161740c31\") " pod="calico-system/calico-node-qmpkh" Oct 2 18:45:57.202068 kubelet[2045]: I1002 18:45:57.200189 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e1be2059-b274-4779-b69e-8ecde5212ade-tigera-ca-bundle\") pod \"calico-typha-5ccdfc8548-2dvzp\" (UID: \"e1be2059-b274-4779-b69e-8ecde5212ade\") " pod="calico-system/calico-typha-5ccdfc8548-2dvzp" Oct 2 18:45:57.202068 kubelet[2045]: I1002 18:45:57.200266 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/33477ebd-279d-4a8f-b897-f51161740c31-flexvol-driver-host\") pod \"calico-node-qmpkh\" (UID: \"33477ebd-279d-4a8f-b897-f51161740c31\") " pod="calico-system/calico-node-qmpkh" Oct 2 18:45:57.202068 kubelet[2045]: I1002 18:45:57.200324 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/33477ebd-279d-4a8f-b897-f51161740c31-xtables-lock\") pod \"calico-node-qmpkh\" (UID: \"33477ebd-279d-4a8f-b897-f51161740c31\") " pod="calico-system/calico-node-qmpkh" Oct 2 18:45:57.202310 kubelet[2045]: I1002 18:45:57.200356 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/33477ebd-279d-4a8f-b897-f51161740c31-policysync\") pod \"calico-node-qmpkh\" (UID: \"33477ebd-279d-4a8f-b897-f51161740c31\") " pod="calico-system/calico-node-qmpkh" Oct 2 18:45:57.202310 kubelet[2045]: I1002 18:45:57.200377 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/33477ebd-279d-4a8f-b897-f51161740c31-cni-net-dir\") pod \"calico-node-qmpkh\" (UID: \"33477ebd-279d-4a8f-b897-f51161740c31\") " pod="calico-system/calico-node-qmpkh" Oct 2 18:45:57.202310 kubelet[2045]: I1002 18:45:57.200410 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/33477ebd-279d-4a8f-b897-f51161740c31-cni-log-dir\") pod \"calico-node-qmpkh\" (UID: \"33477ebd-279d-4a8f-b897-f51161740c31\") " pod="calico-system/calico-node-qmpkh" Oct 2 18:45:57.202310 kubelet[2045]: I1002 18:45:57.200451 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/33477ebd-279d-4a8f-b897-f51161740c31-lib-modules\") pod \"calico-node-qmpkh\" (UID: \"33477ebd-279d-4a8f-b897-f51161740c31\") " pod="calico-system/calico-node-qmpkh" Oct 2 18:45:57.202310 kubelet[2045]: I1002 18:45:57.200477 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/33477ebd-279d-4a8f-b897-f51161740c31-var-lib-calico\") pod \"calico-node-qmpkh\" (UID: \"33477ebd-279d-4a8f-b897-f51161740c31\") " pod="calico-system/calico-node-qmpkh" Oct 2 18:45:57.202421 kubelet[2045]: I1002 18:45:57.200512 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/33477ebd-279d-4a8f-b897-f51161740c31-cni-bin-dir\") pod \"calico-node-qmpkh\" (UID: \"33477ebd-279d-4a8f-b897-f51161740c31\") " pod="calico-system/calico-node-qmpkh" Oct 2 18:45:57.202421 kubelet[2045]: I1002 18:45:57.200540 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-99sgj\" (UniqueName: \"kubernetes.io/projected/e1be2059-b274-4779-b69e-8ecde5212ade-kube-api-access-99sgj\") pod \"calico-typha-5ccdfc8548-2dvzp\" (UID: \"e1be2059-b274-4779-b69e-8ecde5212ade\") " pod="calico-system/calico-typha-5ccdfc8548-2dvzp" Oct 2 18:45:57.202421 kubelet[2045]: I1002 18:45:57.200590 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/33477ebd-279d-4a8f-b897-f51161740c31-node-certs\") pod \"calico-node-qmpkh\" (UID: \"33477ebd-279d-4a8f-b897-f51161740c31\") " pod="calico-system/calico-node-qmpkh" Oct 2 18:45:57.202421 kubelet[2045]: I1002 18:45:57.200615 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mw8nf\" (UniqueName: \"kubernetes.io/projected/33477ebd-279d-4a8f-b897-f51161740c31-kube-api-access-mw8nf\") pod \"calico-node-qmpkh\" (UID: \"33477ebd-279d-4a8f-b897-f51161740c31\") " pod="calico-system/calico-node-qmpkh" Oct 2 18:45:57.202421 kubelet[2045]: I1002 18:45:57.200645 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/e1be2059-b274-4779-b69e-8ecde5212ade-typha-certs\") pod \"calico-typha-5ccdfc8548-2dvzp\" (UID: \"e1be2059-b274-4779-b69e-8ecde5212ade\") " pod="calico-system/calico-typha-5ccdfc8548-2dvzp" Oct 2 18:45:57.303012 kubelet[2045]: E1002 18:45:57.302975 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:57.303012 kubelet[2045]: W1002 18:45:57.302995 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:57.303012 kubelet[2045]: E1002 18:45:57.303016 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:57.311415 kubelet[2045]: E1002 18:45:57.311366 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:57.311415 kubelet[2045]: W1002 18:45:57.311408 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:57.311559 kubelet[2045]: E1002 18:45:57.311463 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:57.311660 kubelet[2045]: E1002 18:45:57.311645 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:57.311660 kubelet[2045]: W1002 18:45:57.311658 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:57.311738 kubelet[2045]: E1002 18:45:57.311682 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:57.311930 kubelet[2045]: E1002 18:45:57.311904 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:57.311930 kubelet[2045]: W1002 18:45:57.311916 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:57.311990 kubelet[2045]: E1002 18:45:57.311960 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:57.312086 kubelet[2045]: E1002 18:45:57.312072 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:57.312086 kubelet[2045]: W1002 18:45:57.312082 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:57.312158 kubelet[2045]: E1002 18:45:57.312120 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:57.312259 kubelet[2045]: E1002 18:45:57.312236 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:57.312259 kubelet[2045]: W1002 18:45:57.312246 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:57.312311 kubelet[2045]: E1002 18:45:57.312281 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:57.312390 kubelet[2045]: E1002 18:45:57.312365 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:57.312390 kubelet[2045]: W1002 18:45:57.312377 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:57.312461 kubelet[2045]: E1002 18:45:57.312392 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:57.312668 kubelet[2045]: E1002 18:45:57.312650 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:57.312668 kubelet[2045]: W1002 18:45:57.312661 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:57.312745 kubelet[2045]: E1002 18:45:57.312681 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:57.312852 kubelet[2045]: E1002 18:45:57.312836 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:57.312852 kubelet[2045]: W1002 18:45:57.312847 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:57.312903 kubelet[2045]: E1002 18:45:57.312857 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:57.313004 kubelet[2045]: E1002 18:45:57.312985 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:57.313004 kubelet[2045]: W1002 18:45:57.313000 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:57.313067 kubelet[2045]: E1002 18:45:57.313009 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:57.313460 kubelet[2045]: E1002 18:45:57.313174 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:57.313460 kubelet[2045]: W1002 18:45:57.313188 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:57.313460 kubelet[2045]: E1002 18:45:57.313199 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:57.314483 kubelet[2045]: E1002 18:45:57.313974 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:57.314483 kubelet[2045]: W1002 18:45:57.313988 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:57.314483 kubelet[2045]: E1002 18:45:57.314003 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:57.321839 kubelet[2045]: E1002 18:45:57.321816 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:57.321839 kubelet[2045]: W1002 18:45:57.321833 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:57.321949 kubelet[2045]: E1002 18:45:57.321849 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:57.343168 kubelet[2045]: E1002 18:45:57.343136 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:57.343168 kubelet[2045]: W1002 18:45:57.343161 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:57.343301 kubelet[2045]: E1002 18:45:57.343181 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:57.432999 kubelet[2045]: E1002 18:45:57.432965 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:57.433494 env[1139]: time="2023-10-02T18:45:57.433428640Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5ccdfc8548-2dvzp,Uid:e1be2059-b274-4779-b69e-8ecde5212ade,Namespace:calico-system,Attempt:0,}" Oct 2 18:45:57.452437 env[1139]: time="2023-10-02T18:45:57.451157204Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:45:57.452437 env[1139]: time="2023-10-02T18:45:57.451202245Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:45:57.452437 env[1139]: time="2023-10-02T18:45:57.451212605Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:45:57.454521 env[1139]: time="2023-10-02T18:45:57.452825449Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2e513c2e1ba56b6219c6d56390cd4a1b1ccd6155cfb584372fbddde6163ee075 pid=2512 runtime=io.containerd.runc.v2 Oct 2 18:45:57.468761 systemd[1]: Started cri-containerd-2e513c2e1ba56b6219c6d56390cd4a1b1ccd6155cfb584372fbddde6163ee075.scope. Oct 2 18:45:57.478700 kubelet[2045]: E1002 18:45:57.478664 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:57.479394 env[1139]: time="2023-10-02T18:45:57.479352572Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-qmpkh,Uid:33477ebd-279d-4a8f-b897-f51161740c31,Namespace:calico-system,Attempt:0,}" Oct 2 18:45:57.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.493000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.493000 audit: BPF prog-id=121 op=LOAD Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2512 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:57.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265353133633265316261353662363231396336643536333930636434 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2512 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:57.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265353133633265316261353662363231396336643536333930636434 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit: BPF prog-id=122 op=LOAD Oct 2 18:45:57.494000 audit[2522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2512 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:57.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265353133633265316261353662363231396336643536333930636434 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit: BPF prog-id=123 op=LOAD Oct 2 18:45:57.494000 audit[2522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2512 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:57.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265353133633265316261353662363231396336643536333930636434 Oct 2 18:45:57.494000 audit: BPF prog-id=123 op=UNLOAD Oct 2 18:45:57.494000 audit: BPF prog-id=122 op=UNLOAD Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.494000 audit: BPF prog-id=124 op=LOAD Oct 2 18:45:57.494000 audit[2522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2512 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:57.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265353133633265316261353662363231396336643536333930636434 Oct 2 18:45:57.502395 env[1139]: time="2023-10-02T18:45:57.502306918Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:45:57.502560 env[1139]: time="2023-10-02T18:45:57.502407680Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:45:57.502560 env[1139]: time="2023-10-02T18:45:57.502442481Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:45:57.502812 env[1139]: time="2023-10-02T18:45:57.502750930Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d7ae0274039384e4bda72433fb1fdf721ee22133bffebff1a92dcb5177785b14 pid=2546 runtime=io.containerd.runc.v2 Oct 2 18:45:57.520389 systemd[1]: Started cri-containerd-d7ae0274039384e4bda72433fb1fdf721ee22133bffebff1a92dcb5177785b14.scope. Oct 2 18:45:57.538761 env[1139]: time="2023-10-02T18:45:57.538718070Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5ccdfc8548-2dvzp,Uid:e1be2059-b274-4779-b69e-8ecde5212ade,Namespace:calico-system,Attempt:0,} returns sandbox id \"2e513c2e1ba56b6219c6d56390cd4a1b1ccd6155cfb584372fbddde6163ee075\"" Oct 2 18:45:57.541152 kubelet[2045]: E1002 18:45:57.541129 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:57.544070 env[1139]: time="2023-10-02T18:45:57.544023215Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.25.0\"" Oct 2 18:45:57.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.562000 audit: BPF prog-id=125 op=LOAD Oct 2 18:45:57.562000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.562000 audit[2556]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000247b38 a2=10 a3=0 items=0 ppid=2546 pid=2556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:57.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437616530323734303339333834653462646137323433336662316664 Oct 2 18:45:57.562000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.562000 audit[2556]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40002475a0 a2=3c a3=0 items=0 ppid=2546 pid=2556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:57.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437616530323734303339333834653462646137323433336662316664 Oct 2 18:45:57.562000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.562000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.562000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.562000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.562000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.562000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.562000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.562000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.562000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.562000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.562000 audit: BPF prog-id=126 op=LOAD Oct 2 18:45:57.562000 audit[2556]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40002478e0 a2=78 a3=0 items=0 ppid=2546 pid=2556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:57.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437616530323734303339333834653462646137323433336662316664 Oct 2 18:45:57.563000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.563000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.563000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.563000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.563000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.563000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.563000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.563000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.563000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.563000 audit: BPF prog-id=127 op=LOAD Oct 2 18:45:57.563000 audit[2556]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000247670 a2=78 a3=0 items=0 ppid=2546 pid=2556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:57.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437616530323734303339333834653462646137323433336662316664 Oct 2 18:45:57.563000 audit: BPF prog-id=127 op=UNLOAD Oct 2 18:45:57.563000 audit: BPF prog-id=126 op=UNLOAD Oct 2 18:45:57.563000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.563000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.563000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.563000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.563000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.563000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.563000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.563000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.563000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.563000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:57.563000 audit: BPF prog-id=128 op=LOAD Oct 2 18:45:57.563000 audit[2556]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000247b40 a2=78 a3=0 items=0 ppid=2546 pid=2556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:57.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437616530323734303339333834653462646137323433336662316664 Oct 2 18:45:57.577414 env[1139]: time="2023-10-02T18:45:57.577362163Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-qmpkh,Uid:33477ebd-279d-4a8f-b897-f51161740c31,Namespace:calico-system,Attempt:0,} returns sandbox id \"d7ae0274039384e4bda72433fb1fdf721ee22133bffebff1a92dcb5177785b14\"" Oct 2 18:45:57.579680 kubelet[2045]: E1002 18:45:57.579656 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:58.026000 audit[2611]: NETFILTER_CFG table=filter:107 family=2 entries=14 op=nft_register_rule pid=2611 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:45:58.026000 audit[2611]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4732 a0=3 a1=fffffc6285e0 a2=0 a3=ffffb796b6c0 items=0 ppid=2260 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:58.026000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:45:58.027000 audit[2611]: NETFILTER_CFG table=nat:108 family=2 entries=20 op=nft_register_rule pid=2611 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:45:58.027000 audit[2611]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=fffffc6285e0 a2=0 a3=ffffb796b6c0 items=0 ppid=2260 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:58.027000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:45:58.615933 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4037197179.mount: Deactivated successfully. Oct 2 18:45:59.333408 env[1139]: time="2023-10-02T18:45:59.333353303Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:59.334932 env[1139]: time="2023-10-02T18:45:59.334872939Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a549a5fe632d63eae6f8f617934a309e3e901a6e8cfb0b038a70b8b950fc4dd5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:59.336278 env[1139]: time="2023-10-02T18:45:59.336243932Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:59.337708 env[1139]: time="2023-10-02T18:45:59.337666646Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:7fb0e011ffae9f88333b7a7488dae37f1d534b46d2b11a0fe2b5d129df58789c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:45:59.338335 env[1139]: time="2023-10-02T18:45:59.338300262Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.25.0\" returns image reference \"sha256:a549a5fe632d63eae6f8f617934a309e3e901a6e8cfb0b038a70b8b950fc4dd5\"" Oct 2 18:45:59.341360 env[1139]: time="2023-10-02T18:45:59.341317014Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\"" Oct 2 18:45:59.347158 env[1139]: time="2023-10-02T18:45:59.347106353Z" level=info msg="CreateContainer within sandbox \"2e513c2e1ba56b6219c6d56390cd4a1b1ccd6155cfb584372fbddde6163ee075\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Oct 2 18:45:59.362078 env[1139]: time="2023-10-02T18:45:59.362023670Z" level=info msg="CreateContainer within sandbox \"2e513c2e1ba56b6219c6d56390cd4a1b1ccd6155cfb584372fbddde6163ee075\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"76aa34feac94a01f49eeba7f27f6d90e514a3aceb7afbe08b2c30adc3dcefce1\"" Oct 2 18:45:59.362638 env[1139]: time="2023-10-02T18:45:59.362611844Z" level=info msg="StartContainer for \"76aa34feac94a01f49eeba7f27f6d90e514a3aceb7afbe08b2c30adc3dcefce1\"" Oct 2 18:45:59.385735 systemd[1]: Started cri-containerd-76aa34feac94a01f49eeba7f27f6d90e514a3aceb7afbe08b2c30adc3dcefce1.scope. Oct 2 18:45:59.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.413000 audit: BPF prog-id=129 op=LOAD Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2512 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:59.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736616133346665616339346130316634396565626137663237663664 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2512 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:59.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736616133346665616339346130316634396565626137663237663664 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit: BPF prog-id=130 op=LOAD Oct 2 18:45:59.414000 audit[2619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2512 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:59.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736616133346665616339346130316634396565626137663237663664 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit: BPF prog-id=131 op=LOAD Oct 2 18:45:59.414000 audit[2619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2512 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:59.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736616133346665616339346130316634396565626137663237663664 Oct 2 18:45:59.414000 audit: BPF prog-id=131 op=UNLOAD Oct 2 18:45:59.414000 audit: BPF prog-id=130 op=UNLOAD Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:45:59.414000 audit: BPF prog-id=132 op=LOAD Oct 2 18:45:59.414000 audit[2619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2512 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:59.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736616133346665616339346130316634396565626137663237663664 Oct 2 18:45:59.429108 env[1139]: time="2023-10-02T18:45:59.429052036Z" level=info msg="StartContainer for \"76aa34feac94a01f49eeba7f27f6d90e514a3aceb7afbe08b2c30adc3dcefce1\" returns successfully" Oct 2 18:45:59.876468 kubelet[2045]: E1002 18:45:59.876425 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:45:59.906492 kubelet[2045]: I1002 18:45:59.905218 2045 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-5ccdfc8548-2dvzp" podStartSLOduration=-9.22337203394961e+09 pod.CreationTimestamp="2023-10-02 18:45:57 +0000 UTC" firstStartedPulling="2023-10-02 18:45:57.543750487 +0000 UTC m=+17.835873016" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:45:59.891124225 +0000 UTC m=+20.183246754" watchObservedRunningTime="2023-10-02 18:45:59.905166881 +0000 UTC m=+20.197289410" Oct 2 18:45:59.920163 kubelet[2045]: E1002 18:45:59.920136 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.920342 kubelet[2045]: W1002 18:45:59.920327 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.920426 kubelet[2045]: E1002 18:45:59.920415 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.920703 kubelet[2045]: E1002 18:45:59.920690 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.920805 kubelet[2045]: W1002 18:45:59.920792 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.920882 kubelet[2045]: E1002 18:45:59.920873 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.922510 kubelet[2045]: E1002 18:45:59.922492 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.922632 kubelet[2045]: W1002 18:45:59.922619 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.922707 kubelet[2045]: E1002 18:45:59.922698 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.923021 kubelet[2045]: E1002 18:45:59.923005 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.923130 kubelet[2045]: W1002 18:45:59.923117 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.923213 kubelet[2045]: E1002 18:45:59.923203 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.923469 kubelet[2045]: E1002 18:45:59.923432 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.923557 kubelet[2045]: W1002 18:45:59.923543 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.923627 kubelet[2045]: E1002 18:45:59.923618 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.923835 kubelet[2045]: E1002 18:45:59.923824 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.923918 kubelet[2045]: W1002 18:45:59.923907 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.923994 kubelet[2045]: E1002 18:45:59.923986 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.924436 kubelet[2045]: E1002 18:45:59.924419 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.924560 kubelet[2045]: W1002 18:45:59.924546 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.924632 kubelet[2045]: E1002 18:45:59.924615 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.924880 kubelet[2045]: E1002 18:45:59.924867 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.924966 kubelet[2045]: W1002 18:45:59.924954 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.925058 kubelet[2045]: E1002 18:45:59.925030 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.925355 kubelet[2045]: E1002 18:45:59.925339 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.925505 kubelet[2045]: W1002 18:45:59.925438 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.925570 kubelet[2045]: E1002 18:45:59.925560 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.925966 kubelet[2045]: E1002 18:45:59.925949 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.926049 kubelet[2045]: W1002 18:45:59.926036 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.926143 kubelet[2045]: E1002 18:45:59.926117 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.926545 kubelet[2045]: E1002 18:45:59.926520 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.926545 kubelet[2045]: W1002 18:45:59.926537 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.926642 kubelet[2045]: E1002 18:45:59.926554 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.926758 kubelet[2045]: E1002 18:45:59.926738 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.926758 kubelet[2045]: W1002 18:45:59.926750 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.926825 kubelet[2045]: E1002 18:45:59.926762 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.927041 kubelet[2045]: E1002 18:45:59.927020 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.927041 kubelet[2045]: W1002 18:45:59.927032 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.927041 kubelet[2045]: E1002 18:45:59.927043 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.927263 kubelet[2045]: E1002 18:45:59.927245 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.927263 kubelet[2045]: W1002 18:45:59.927256 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.927332 kubelet[2045]: E1002 18:45:59.927272 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.927469 kubelet[2045]: E1002 18:45:59.927438 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.927469 kubelet[2045]: W1002 18:45:59.927463 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.927599 kubelet[2045]: E1002 18:45:59.927479 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.927682 kubelet[2045]: E1002 18:45:59.927667 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.927682 kubelet[2045]: W1002 18:45:59.927677 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.927749 kubelet[2045]: E1002 18:45:59.927692 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.927857 kubelet[2045]: E1002 18:45:59.927843 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.927857 kubelet[2045]: W1002 18:45:59.927853 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.927920 kubelet[2045]: E1002 18:45:59.927863 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.928033 kubelet[2045]: E1002 18:45:59.928019 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.928033 kubelet[2045]: W1002 18:45:59.928027 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.928111 kubelet[2045]: E1002 18:45:59.928042 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.928215 kubelet[2045]: E1002 18:45:59.928201 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.928215 kubelet[2045]: W1002 18:45:59.928210 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.928299 kubelet[2045]: E1002 18:45:59.928225 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.928573 kubelet[2045]: E1002 18:45:59.928553 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.928671 kubelet[2045]: W1002 18:45:59.928657 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.928754 kubelet[2045]: E1002 18:45:59.928743 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.928952 kubelet[2045]: E1002 18:45:59.928925 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.928952 kubelet[2045]: W1002 18:45:59.928938 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.928952 kubelet[2045]: E1002 18:45:59.928954 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.929216 kubelet[2045]: E1002 18:45:59.929115 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.929216 kubelet[2045]: W1002 18:45:59.929123 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.929216 kubelet[2045]: E1002 18:45:59.929136 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.929330 kubelet[2045]: E1002 18:45:59.929272 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.929330 kubelet[2045]: W1002 18:45:59.929279 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.929330 kubelet[2045]: E1002 18:45:59.929294 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.929533 kubelet[2045]: E1002 18:45:59.929517 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.929533 kubelet[2045]: W1002 18:45:59.929533 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.929615 kubelet[2045]: E1002 18:45:59.929552 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.929712 kubelet[2045]: E1002 18:45:59.929703 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.929712 kubelet[2045]: W1002 18:45:59.929712 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.929768 kubelet[2045]: E1002 18:45:59.929726 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.929892 kubelet[2045]: E1002 18:45:59.929881 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.929934 kubelet[2045]: W1002 18:45:59.929892 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.929934 kubelet[2045]: E1002 18:45:59.929904 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.930076 kubelet[2045]: E1002 18:45:59.930065 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.930076 kubelet[2045]: W1002 18:45:59.930076 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.930149 kubelet[2045]: E1002 18:45:59.930090 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.930440 kubelet[2045]: E1002 18:45:59.930428 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.930440 kubelet[2045]: W1002 18:45:59.930441 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.930440 kubelet[2045]: E1002 18:45:59.930475 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.930661 kubelet[2045]: E1002 18:45:59.930651 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.930661 kubelet[2045]: W1002 18:45:59.930660 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.930718 kubelet[2045]: E1002 18:45:59.930671 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.930984 kubelet[2045]: E1002 18:45:59.930973 2045 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:45:59.930984 kubelet[2045]: W1002 18:45:59.930984 2045 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:45:59.931056 kubelet[2045]: E1002 18:45:59.930995 2045 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:45:59.955000 audit[2709]: NETFILTER_CFG table=filter:109 family=2 entries=13 op=nft_register_rule pid=2709 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:45:59.955000 audit[2709]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4028 a0=3 a1=ffffd119f460 a2=0 a3=ffff8a0ce6c0 items=0 ppid=2260 pid=2709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:59.955000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:45:59.956000 audit[2709]: NETFILTER_CFG table=nat:110 family=2 entries=27 op=nft_register_chain pid=2709 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:45:59.956000 audit[2709]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8836 a0=3 a1=ffffd119f460 a2=0 a3=ffff8a0ce6c0 items=0 ppid=2260 pid=2709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:45:59.956000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:46:00.594118 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount185393314.mount: Deactivated successfully. Oct 2 18:46:00.671517 env[1139]: time="2023-10-02T18:46:00.671469203Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:00.673020 env[1139]: time="2023-10-02T18:46:00.672979717Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:125b9deae5a04d82056336c1aff8ab9c7ed64cdc224c7139c7433a3a29c21fc8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:00.674527 env[1139]: time="2023-10-02T18:46:00.674496831Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:00.675749 env[1139]: time="2023-10-02T18:46:00.675724579Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:182a323c25a3503be8c504892a12a55d99a42c3a582cb8e93a1ecc7c193a44c5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:00.676203 env[1139]: time="2023-10-02T18:46:00.676173989Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\" returns image reference \"sha256:125b9deae5a04d82056336c1aff8ab9c7ed64cdc224c7139c7433a3a29c21fc8\"" Oct 2 18:46:00.678139 env[1139]: time="2023-10-02T18:46:00.678102112Z" level=info msg="CreateContainer within sandbox \"d7ae0274039384e4bda72433fb1fdf721ee22133bffebff1a92dcb5177785b14\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Oct 2 18:46:00.689458 env[1139]: time="2023-10-02T18:46:00.689405206Z" level=info msg="CreateContainer within sandbox \"d7ae0274039384e4bda72433fb1fdf721ee22133bffebff1a92dcb5177785b14\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"d2636bf636823d2cb29726b11e3c8dfc2bb83da0e5849373ef023fee8d1f0f97\"" Oct 2 18:46:00.689950 env[1139]: time="2023-10-02T18:46:00.689896337Z" level=info msg="StartContainer for \"d2636bf636823d2cb29726b11e3c8dfc2bb83da0e5849373ef023fee8d1f0f97\"" Oct 2 18:46:00.714369 systemd[1]: Started cri-containerd-d2636bf636823d2cb29726b11e3c8dfc2bb83da0e5849373ef023fee8d1f0f97.scope. Oct 2 18:46:00.760000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.760000 audit[2718]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2546 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:00.760000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432363336626636333638323364326362323937323662313165336338 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit: BPF prog-id=133 op=LOAD Oct 2 18:46:00.761000 audit[2718]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2546 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:00.761000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432363336626636333638323364326362323937323662313165336338 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit: BPF prog-id=134 op=LOAD Oct 2 18:46:00.761000 audit[2718]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2546 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:00.761000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432363336626636333638323364326362323937323662313165336338 Oct 2 18:46:00.761000 audit: BPF prog-id=134 op=UNLOAD Oct 2 18:46:00.761000 audit: BPF prog-id=133 op=UNLOAD Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:00.761000 audit: BPF prog-id=135 op=LOAD Oct 2 18:46:00.761000 audit[2718]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2546 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:00.761000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432363336626636333638323364326362323937323662313165336338 Oct 2 18:46:00.774034 env[1139]: time="2023-10-02T18:46:00.773984986Z" level=info msg="StartContainer for \"d2636bf636823d2cb29726b11e3c8dfc2bb83da0e5849373ef023fee8d1f0f97\" returns successfully" Oct 2 18:46:00.783904 systemd[1]: cri-containerd-d2636bf636823d2cb29726b11e3c8dfc2bb83da0e5849373ef023fee8d1f0f97.scope: Deactivated successfully. Oct 2 18:46:00.790000 audit: BPF prog-id=135 op=UNLOAD Oct 2 18:46:00.881957 kubelet[2045]: E1002 18:46:00.879863 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:00.881957 kubelet[2045]: E1002 18:46:00.881398 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:00.955404 env[1139]: time="2023-10-02T18:46:00.955350259Z" level=info msg="shim disconnected" id=d2636bf636823d2cb29726b11e3c8dfc2bb83da0e5849373ef023fee8d1f0f97 Oct 2 18:46:00.955404 env[1139]: time="2023-10-02T18:46:00.955393660Z" level=warning msg="cleaning up after shim disconnected" id=d2636bf636823d2cb29726b11e3c8dfc2bb83da0e5849373ef023fee8d1f0f97 namespace=k8s.io Oct 2 18:46:00.955404 env[1139]: time="2023-10-02T18:46:00.955403260Z" level=info msg="cleaning up dead shim" Oct 2 18:46:00.964343 env[1139]: time="2023-10-02T18:46:00.964298620Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:46:00Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2759 runtime=io.containerd.runc.v2\n" Oct 2 18:46:01.508927 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d2636bf636823d2cb29726b11e3c8dfc2bb83da0e5849373ef023fee8d1f0f97-rootfs.mount: Deactivated successfully. Oct 2 18:46:01.887973 kubelet[2045]: E1002 18:46:01.887860 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:01.888440 kubelet[2045]: E1002 18:46:01.888423 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:01.892041 env[1139]: time="2023-10-02T18:46:01.891977635Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\"" Oct 2 18:46:02.892200 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3178383117.mount: Deactivated successfully. Oct 2 18:46:05.157118 env[1139]: time="2023-10-02T18:46:05.157063370Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:05.163927 env[1139]: time="2023-10-02T18:46:05.163881443Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0bb8d6f033a0548573ff857c26574d89a8ad4b691aa88a32eddf0c7db06599ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:05.166664 env[1139]: time="2023-10-02T18:46:05.166609929Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:05.168679 env[1139]: time="2023-10-02T18:46:05.168587620Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:34bf454be8cd5b9a35ab29c2479ff68a26497c2c87eb606e4bfe57c7fbeeff35,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:05.169436 env[1139]: time="2023-10-02T18:46:05.169199128Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\" returns image reference \"sha256:0bb8d6f033a0548573ff857c26574d89a8ad4b691aa88a32eddf0c7db06599ef\"" Oct 2 18:46:05.171919 env[1139]: time="2023-10-02T18:46:05.171887011Z" level=info msg="CreateContainer within sandbox \"d7ae0274039384e4bda72433fb1fdf721ee22133bffebff1a92dcb5177785b14\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Oct 2 18:46:05.196063 env[1139]: time="2023-10-02T18:46:05.196012920Z" level=info msg="CreateContainer within sandbox \"d7ae0274039384e4bda72433fb1fdf721ee22133bffebff1a92dcb5177785b14\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"3865f6bf97ceedcffb13f8ae0915907739fe3a9b36715f1ff517a9e73940f251\"" Oct 2 18:46:05.196663 env[1139]: time="2023-10-02T18:46:05.196636909Z" level=info msg="StartContainer for \"3865f6bf97ceedcffb13f8ae0915907739fe3a9b36715f1ff517a9e73940f251\"" Oct 2 18:46:05.217588 systemd[1]: run-containerd-runc-k8s.io-3865f6bf97ceedcffb13f8ae0915907739fe3a9b36715f1ff517a9e73940f251-runc.qkJSo5.mount: Deactivated successfully. Oct 2 18:46:05.219885 systemd[1]: Started cri-containerd-3865f6bf97ceedcffb13f8ae0915907739fe3a9b36715f1ff517a9e73940f251.scope. Oct 2 18:46:05.247000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.249903 kernel: kauditd_printk_skb: 229 callbacks suppressed Oct 2 18:46:05.249964 kernel: audit: type=1400 audit(1696272365.247:1104): avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.247000 audit[2778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2546 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:05.254453 kernel: audit: type=1300 audit(1696272365.247:1104): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2546 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:05.254511 kernel: audit: type=1327 audit(1696272365.247:1104): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338363566366266393763656564636666623133663861653039313539 Oct 2 18:46:05.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338363566366266393763656564636666623133663861653039313539 Oct 2 18:46:05.248000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.258536 kernel: audit: type=1400 audit(1696272365.248:1105): avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.248000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.260926 kernel: audit: type=1400 audit(1696272365.248:1105): avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.260991 kernel: audit: type=1400 audit(1696272365.248:1105): avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.248000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.248000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.264402 kernel: audit: type=1400 audit(1696272365.248:1105): avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.264492 kernel: audit: type=1400 audit(1696272365.248:1105): avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.248000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.248000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.268064 kernel: audit: type=1400 audit(1696272365.248:1105): avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.268126 kernel: audit: type=1400 audit(1696272365.248:1105): avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.248000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.248000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.248000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.248000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.248000 audit: BPF prog-id=136 op=LOAD Oct 2 18:46:05.248000 audit[2778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2546 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:05.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338363566366266393763656564636666623133663861653039313539 Oct 2 18:46:05.248000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.248000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.248000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.248000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.248000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.248000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.248000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.248000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.248000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.248000 audit: BPF prog-id=137 op=LOAD Oct 2 18:46:05.248000 audit[2778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2546 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:05.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338363566366266393763656564636666623133663861653039313539 Oct 2 18:46:05.250000 audit: BPF prog-id=137 op=UNLOAD Oct 2 18:46:05.250000 audit: BPF prog-id=136 op=UNLOAD Oct 2 18:46:05.250000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.250000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.250000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.250000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.250000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.250000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.250000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.250000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.250000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.250000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:05.250000 audit: BPF prog-id=138 op=LOAD Oct 2 18:46:05.250000 audit[2778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2546 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:05.250000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338363566366266393763656564636666623133663861653039313539 Oct 2 18:46:05.282759 env[1139]: time="2023-10-02T18:46:05.282714746Z" level=info msg="StartContainer for \"3865f6bf97ceedcffb13f8ae0915907739fe3a9b36715f1ff517a9e73940f251\" returns successfully" Oct 2 18:46:05.897247 kubelet[2045]: E1002 18:46:05.897205 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:05.968352 env[1139]: time="2023-10-02T18:46:05.966035475Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 18:46:05.970432 systemd[1]: cri-containerd-3865f6bf97ceedcffb13f8ae0915907739fe3a9b36715f1ff517a9e73940f251.scope: Deactivated successfully. Oct 2 18:46:05.973000 audit: BPF prog-id=138 op=UNLOAD Oct 2 18:46:06.063500 kubelet[2045]: I1002 18:46:06.063456 2045 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Oct 2 18:46:06.066886 env[1139]: time="2023-10-02T18:46:06.066844386Z" level=info msg="shim disconnected" id=3865f6bf97ceedcffb13f8ae0915907739fe3a9b36715f1ff517a9e73940f251 Oct 2 18:46:06.067050 env[1139]: time="2023-10-02T18:46:06.067033395Z" level=warning msg="cleaning up after shim disconnected" id=3865f6bf97ceedcffb13f8ae0915907739fe3a9b36715f1ff517a9e73940f251 namespace=k8s.io Oct 2 18:46:06.067107 env[1139]: time="2023-10-02T18:46:06.067095558Z" level=info msg="cleaning up dead shim" Oct 2 18:46:06.078401 env[1139]: time="2023-10-02T18:46:06.078348101Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:46:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2826 runtime=io.containerd.runc.v2\n" Oct 2 18:46:06.085002 kubelet[2045]: I1002 18:46:06.084792 2045 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:46:06.092956 kubelet[2045]: I1002 18:46:06.092857 2045 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:46:06.093512 kubelet[2045]: I1002 18:46:06.093470 2045 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:46:06.099107 kubelet[2045]: I1002 18:46:06.098146 2045 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:46:06.101439 systemd[1]: Created slice kubepods-burstable-pod82f96fa7_627f_4c7d_935f_b21d213344a8.slice. Oct 2 18:46:06.107680 systemd[1]: Created slice kubepods-besteffort-pod4651c191_e5a5_43a3_92a0_4e8af059654c.slice. Oct 2 18:46:06.114104 systemd[1]: Created slice kubepods-burstable-poddfc00849_f8bc_438a_a6e0_f12214fdbed2.slice. Oct 2 18:46:06.120843 systemd[1]: Created slice kubepods-besteffort-pod0ac531b4_60de_4c30_9e55_9511dd464d1f.slice. Oct 2 18:46:06.174929 kubelet[2045]: I1002 18:46:06.174785 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/0ac531b4-60de-4c30-9e55-9511dd464d1f-registration-dir\") pod \"csi-node-driver-gxhfr\" (UID: \"0ac531b4-60de-4c30-9e55-9511dd464d1f\") " pod="calico-system/csi-node-driver-gxhfr" Oct 2 18:46:06.174929 kubelet[2045]: I1002 18:46:06.174898 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-22v8t\" (UniqueName: \"kubernetes.io/projected/4651c191-e5a5-43a3-92a0-4e8af059654c-kube-api-access-22v8t\") pod \"calico-kube-controllers-69c848ddc6-lmcp7\" (UID: \"4651c191-e5a5-43a3-92a0-4e8af059654c\") " pod="calico-system/calico-kube-controllers-69c848ddc6-lmcp7" Oct 2 18:46:06.174929 kubelet[2045]: I1002 18:46:06.174925 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etccalico\" (UniqueName: \"kubernetes.io/host-path/0ac531b4-60de-4c30-9e55-9511dd464d1f-etccalico\") pod \"csi-node-driver-gxhfr\" (UID: \"0ac531b4-60de-4c30-9e55-9511dd464d1f\") " pod="calico-system/csi-node-driver-gxhfr" Oct 2 18:46:06.175174 kubelet[2045]: I1002 18:46:06.174948 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/0ac531b4-60de-4c30-9e55-9511dd464d1f-socket-dir\") pod \"csi-node-driver-gxhfr\" (UID: \"0ac531b4-60de-4c30-9e55-9511dd464d1f\") " pod="calico-system/csi-node-driver-gxhfr" Oct 2 18:46:06.175174 kubelet[2045]: I1002 18:46:06.175143 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/dfc00849-f8bc-438a-a6e0-f12214fdbed2-config-volume\") pod \"coredns-787d4945fb-c2tbt\" (UID: \"dfc00849-f8bc-438a-a6e0-f12214fdbed2\") " pod="kube-system/coredns-787d4945fb-c2tbt" Oct 2 18:46:06.175174 kubelet[2045]: I1002 18:46:06.175167 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/82f96fa7-627f-4c7d-935f-b21d213344a8-config-volume\") pod \"coredns-787d4945fb-bbgkt\" (UID: \"82f96fa7-627f-4c7d-935f-b21d213344a8\") " pod="kube-system/coredns-787d4945fb-bbgkt" Oct 2 18:46:06.175250 kubelet[2045]: I1002 18:46:06.175229 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/0ac531b4-60de-4c30-9e55-9511dd464d1f-kubelet-dir\") pod \"csi-node-driver-gxhfr\" (UID: \"0ac531b4-60de-4c30-9e55-9511dd464d1f\") " pod="calico-system/csi-node-driver-gxhfr" Oct 2 18:46:06.175278 kubelet[2045]: I1002 18:46:06.175254 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-d9n4b\" (UniqueName: \"kubernetes.io/projected/dfc00849-f8bc-438a-a6e0-f12214fdbed2-kube-api-access-d9n4b\") pod \"coredns-787d4945fb-c2tbt\" (UID: \"dfc00849-f8bc-438a-a6e0-f12214fdbed2\") " pod="kube-system/coredns-787d4945fb-c2tbt" Oct 2 18:46:06.175321 kubelet[2045]: I1002 18:46:06.175302 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ssdhd\" (UniqueName: \"kubernetes.io/projected/82f96fa7-627f-4c7d-935f-b21d213344a8-kube-api-access-ssdhd\") pod \"coredns-787d4945fb-bbgkt\" (UID: \"82f96fa7-627f-4c7d-935f-b21d213344a8\") " pod="kube-system/coredns-787d4945fb-bbgkt" Oct 2 18:46:06.175353 kubelet[2045]: I1002 18:46:06.175331 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/0ac531b4-60de-4c30-9e55-9511dd464d1f-varrun\") pod \"csi-node-driver-gxhfr\" (UID: \"0ac531b4-60de-4c30-9e55-9511dd464d1f\") " pod="calico-system/csi-node-driver-gxhfr" Oct 2 18:46:06.175411 kubelet[2045]: I1002 18:46:06.175389 2045 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-trt9t\" (UniqueName: \"kubernetes.io/projected/0ac531b4-60de-4c30-9e55-9511dd464d1f-kube-api-access-trt9t\") pod \"csi-node-driver-gxhfr\" (UID: \"0ac531b4-60de-4c30-9e55-9511dd464d1f\") " pod="calico-system/csi-node-driver-gxhfr" Oct 2 18:46:06.180923 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3865f6bf97ceedcffb13f8ae0915907739fe3a9b36715f1ff517a9e73940f251-rootfs.mount: Deactivated successfully. Oct 2 18:46:06.425480 env[1139]: time="2023-10-02T18:46:06.425346213Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-gxhfr,Uid:0ac531b4-60de-4c30-9e55-9511dd464d1f,Namespace:calico-system,Attempt:0,}" Oct 2 18:46:06.526383 env[1139]: time="2023-10-02T18:46:06.526307486Z" level=error msg="Failed to destroy network for sandbox \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:06.527284 env[1139]: time="2023-10-02T18:46:06.526803988Z" level=error msg="encountered an error cleaning up failed sandbox \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:06.527284 env[1139]: time="2023-10-02T18:46:06.526863631Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-gxhfr,Uid:0ac531b4-60de-4c30-9e55-9511dd464d1f,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:06.529221 kubelet[2045]: E1002 18:46:06.528810 2045 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:06.529221 kubelet[2045]: E1002 18:46:06.528886 2045 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-gxhfr" Oct 2 18:46:06.529221 kubelet[2045]: E1002 18:46:06.529079 2045 kuberuntime_manager.go:782] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-gxhfr" Oct 2 18:46:06.529415 kubelet[2045]: E1002 18:46:06.529145 2045 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-gxhfr_calico-system(0ac531b4-60de-4c30-9e55-9511dd464d1f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-gxhfr_calico-system(0ac531b4-60de-4c30-9e55-9511dd464d1f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-gxhfr" podUID=0ac531b4-60de-4c30-9e55-9511dd464d1f Oct 2 18:46:06.713413 env[1139]: time="2023-10-02T18:46:06.713207041Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69c848ddc6-lmcp7,Uid:4651c191-e5a5-43a3-92a0-4e8af059654c,Namespace:calico-system,Attempt:0,}" Oct 2 18:46:06.722989 kubelet[2045]: E1002 18:46:06.722941 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:06.725377 env[1139]: time="2023-10-02T18:46:06.723545543Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-c2tbt,Uid:dfc00849-f8bc-438a-a6e0-f12214fdbed2,Namespace:kube-system,Attempt:0,}" Oct 2 18:46:06.820356 env[1139]: time="2023-10-02T18:46:06.820275667Z" level=error msg="Failed to destroy network for sandbox \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:06.820790 env[1139]: time="2023-10-02T18:46:06.820683765Z" level=error msg="encountered an error cleaning up failed sandbox \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:06.820790 env[1139]: time="2023-10-02T18:46:06.820770369Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69c848ddc6-lmcp7,Uid:4651c191-e5a5-43a3-92a0-4e8af059654c,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:06.821308 kubelet[2045]: E1002 18:46:06.821112 2045 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:06.821498 kubelet[2045]: E1002 18:46:06.821473 2045 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-69c848ddc6-lmcp7" Oct 2 18:46:06.821552 kubelet[2045]: E1002 18:46:06.821509 2045 kuberuntime_manager.go:782] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-69c848ddc6-lmcp7" Oct 2 18:46:06.821586 kubelet[2045]: E1002 18:46:06.821564 2045 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-69c848ddc6-lmcp7_calico-system(4651c191-e5a5-43a3-92a0-4e8af059654c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-69c848ddc6-lmcp7_calico-system(4651c191-e5a5-43a3-92a0-4e8af059654c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-69c848ddc6-lmcp7" podUID=4651c191-e5a5-43a3-92a0-4e8af059654c Oct 2 18:46:06.833249 env[1139]: time="2023-10-02T18:46:06.832688182Z" level=error msg="Failed to destroy network for sandbox \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:06.833249 env[1139]: time="2023-10-02T18:46:06.833040318Z" level=error msg="encountered an error cleaning up failed sandbox \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:06.833249 env[1139]: time="2023-10-02T18:46:06.833085760Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-c2tbt,Uid:dfc00849-f8bc-438a-a6e0-f12214fdbed2,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:06.833943 kubelet[2045]: E1002 18:46:06.833617 2045 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:06.833943 kubelet[2045]: E1002 18:46:06.833671 2045 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-787d4945fb-c2tbt" Oct 2 18:46:06.833943 kubelet[2045]: E1002 18:46:06.833703 2045 kuberuntime_manager.go:782] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-787d4945fb-c2tbt" Oct 2 18:46:06.834090 kubelet[2045]: E1002 18:46:06.833749 2045 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-787d4945fb-c2tbt_kube-system(dfc00849-f8bc-438a-a6e0-f12214fdbed2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-787d4945fb-c2tbt_kube-system(dfc00849-f8bc-438a-a6e0-f12214fdbed2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-787d4945fb-c2tbt" podUID=dfc00849-f8bc-438a-a6e0-f12214fdbed2 Oct 2 18:46:06.902594 kubelet[2045]: E1002 18:46:06.902567 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:06.904177 env[1139]: time="2023-10-02T18:46:06.903751119Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\"" Oct 2 18:46:06.913468 kubelet[2045]: I1002 18:46:06.906076 2045 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Oct 2 18:46:06.913468 kubelet[2045]: I1002 18:46:06.912649 2045 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Oct 2 18:46:06.913612 env[1139]: time="2023-10-02T18:46:06.906613567Z" level=info msg="StopPodSandbox for \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\"" Oct 2 18:46:06.913612 env[1139]: time="2023-10-02T18:46:06.913159899Z" level=info msg="StopPodSandbox for \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\"" Oct 2 18:46:06.915455 kubelet[2045]: I1002 18:46:06.915420 2045 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Oct 2 18:46:06.915885 env[1139]: time="2023-10-02T18:46:06.915857340Z" level=info msg="StopPodSandbox for \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\"" Oct 2 18:46:06.949685 env[1139]: time="2023-10-02T18:46:06.949630730Z" level=error msg="StopPodSandbox for \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\" failed" error="failed to destroy network for sandbox \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:06.950395 kubelet[2045]: E1002 18:46:06.950354 2045 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Oct 2 18:46:06.950512 kubelet[2045]: E1002 18:46:06.950438 2045 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe} Oct 2 18:46:06.950512 kubelet[2045]: E1002 18:46:06.950482 2045 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"dfc00849-f8bc-438a-a6e0-f12214fdbed2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 18:46:06.950624 kubelet[2045]: E1002 18:46:06.950525 2045 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"dfc00849-f8bc-438a-a6e0-f12214fdbed2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-787d4945fb-c2tbt" podUID=dfc00849-f8bc-438a-a6e0-f12214fdbed2 Oct 2 18:46:06.951074 env[1139]: time="2023-10-02T18:46:06.951030952Z" level=error msg="StopPodSandbox for \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\" failed" error="failed to destroy network for sandbox \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:06.951207 kubelet[2045]: E1002 18:46:06.951186 2045 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Oct 2 18:46:06.951265 kubelet[2045]: E1002 18:46:06.951217 2045 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39} Oct 2 18:46:06.951265 kubelet[2045]: E1002 18:46:06.951248 2045 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"0ac531b4-60de-4c30-9e55-9511dd464d1f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 18:46:06.951350 kubelet[2045]: E1002 18:46:06.951272 2045 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"0ac531b4-60de-4c30-9e55-9511dd464d1f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-gxhfr" podUID=0ac531b4-60de-4c30-9e55-9511dd464d1f Oct 2 18:46:06.962873 env[1139]: time="2023-10-02T18:46:06.962817119Z" level=error msg="StopPodSandbox for \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\" failed" error="failed to destroy network for sandbox \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:06.963107 kubelet[2045]: E1002 18:46:06.963073 2045 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Oct 2 18:46:06.963168 kubelet[2045]: E1002 18:46:06.963122 2045 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7} Oct 2 18:46:06.963168 kubelet[2045]: E1002 18:46:06.963154 2045 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4651c191-e5a5-43a3-92a0-4e8af059654c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 18:46:06.963249 kubelet[2045]: E1002 18:46:06.963179 2045 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4651c191-e5a5-43a3-92a0-4e8af059654c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-69c848ddc6-lmcp7" podUID=4651c191-e5a5-43a3-92a0-4e8af059654c Oct 2 18:46:07.004662 kubelet[2045]: E1002 18:46:07.004562 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:07.005549 env[1139]: time="2023-10-02T18:46:07.005134047Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-bbgkt,Uid:82f96fa7-627f-4c7d-935f-b21d213344a8,Namespace:kube-system,Attempt:0,}" Oct 2 18:46:07.067270 env[1139]: time="2023-10-02T18:46:07.067212987Z" level=error msg="Failed to destroy network for sandbox \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:07.067614 env[1139]: time="2023-10-02T18:46:07.067575642Z" level=error msg="encountered an error cleaning up failed sandbox \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:07.067665 env[1139]: time="2023-10-02T18:46:07.067627165Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-bbgkt,Uid:82f96fa7-627f-4c7d-935f-b21d213344a8,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:07.067896 kubelet[2045]: E1002 18:46:07.067857 2045 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:07.067962 kubelet[2045]: E1002 18:46:07.067923 2045 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-787d4945fb-bbgkt" Oct 2 18:46:07.067962 kubelet[2045]: E1002 18:46:07.067944 2045 kuberuntime_manager.go:782] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-787d4945fb-bbgkt" Oct 2 18:46:07.068021 kubelet[2045]: E1002 18:46:07.067992 2045 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-787d4945fb-bbgkt_kube-system(82f96fa7-627f-4c7d-935f-b21d213344a8)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-787d4945fb-bbgkt_kube-system(82f96fa7-627f-4c7d-935f-b21d213344a8)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-787d4945fb-bbgkt" podUID=82f96fa7-627f-4c7d-935f-b21d213344a8 Oct 2 18:46:07.190360 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39-shm.mount: Deactivated successfully. Oct 2 18:46:07.918924 kubelet[2045]: I1002 18:46:07.918406 2045 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Oct 2 18:46:07.919260 env[1139]: time="2023-10-02T18:46:07.918980741Z" level=info msg="StopPodSandbox for \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\"" Oct 2 18:46:07.961368 env[1139]: time="2023-10-02T18:46:07.961299181Z" level=error msg="StopPodSandbox for \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\" failed" error="failed to destroy network for sandbox \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:07.962344 kubelet[2045]: E1002 18:46:07.961610 2045 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Oct 2 18:46:07.962344 kubelet[2045]: E1002 18:46:07.961655 2045 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738} Oct 2 18:46:07.962344 kubelet[2045]: E1002 18:46:07.961714 2045 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"82f96fa7-627f-4c7d-935f-b21d213344a8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 18:46:07.962344 kubelet[2045]: E1002 18:46:07.961743 2045 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"82f96fa7-627f-4c7d-935f-b21d213344a8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-787d4945fb-bbgkt" podUID=82f96fa7-627f-4c7d-935f-b21d213344a8 Oct 2 18:46:09.900637 kubelet[2045]: I1002 18:46:09.900602 2045 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 18:46:09.901571 kubelet[2045]: I1002 18:46:09.901543 2045 container_gc.go:86] "Attempting to delete unused containers" Oct 2 18:46:09.910749 kubelet[2045]: I1002 18:46:09.908579 2045 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 18:46:09.912026 kubelet[2045]: I1002 18:46:09.910808 2045 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0" size=13423150 Oct 2 18:46:09.912182 env[1139]: time="2023-10-02T18:46:09.911111452Z" level=info msg="RemoveImage \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\"" Oct 2 18:46:10.069309 env[1139]: time="2023-10-02T18:46:10.068036595Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns:v1.9.3,XXX_unrecognized:[],}" Oct 2 18:46:10.164234 env[1139]: time="2023-10-02T18:46:10.163863591Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,XXX_unrecognized:[],}" Oct 2 18:46:10.165225 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount844849405.mount: Deactivated successfully. Oct 2 18:46:10.171514 env[1139]: time="2023-10-02T18:46:10.170813789Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0,XXX_unrecognized:[],}" Oct 2 18:46:10.182147 env[1139]: time="2023-10-02T18:46:10.182069160Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node:v3.25.0\": failed to extract layer sha256:9121b18510c3d8c839b48cf5132458a282491298179ea29e81ad155e282f151f: mount callback failed on /var/lib/containerd/tmpmounts/containerd-mount844849405: write /var/lib/containerd/tmpmounts/containerd-mount844849405/usr/lib/calico/bpf/test_to_nat_fib_debug.o: no space left on device: unknown" Oct 2 18:46:10.182611 kubelet[2045]: E1002 18:46:10.182570 2045 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node:v3.25.0\": failed to extract layer sha256:9121b18510c3d8c839b48cf5132458a282491298179ea29e81ad155e282f151f: mount callback failed on /var/lib/containerd/tmpmounts/containerd-mount844849405: write /var/lib/containerd/tmpmounts/containerd-mount844849405/usr/lib/calico/bpf/test_to_nat_fib_debug.o: no space left on device: unknown" image="ghcr.io/flatcar/calico/node:v3.25.0" Oct 2 18:46:10.182745 kubelet[2045]: E1002 18:46:10.182625 2045 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node:v3.25.0\": failed to extract layer sha256:9121b18510c3d8c839b48cf5132458a282491298179ea29e81ad155e282f151f: mount callback failed on /var/lib/containerd/tmpmounts/containerd-mount844849405: write /var/lib/containerd/tmpmounts/containerd-mount844849405/usr/lib/calico/bpf/test_to_nat_fib_debug.o: no space left on device: unknown" image="ghcr.io/flatcar/calico/node:v3.25.0" Oct 2 18:46:10.184988 kubelet[2045]: E1002 18:46:10.184903 2045 kuberuntime_manager.go:872] container &Container{Name:calico-node,Image:ghcr.io/flatcar/calico/node:v3.25.0,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:WAIT_FOR_DATASTORE,Value:true,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:k8s,operator,bgp,ValueFrom:nil,},EnvVar{Name:CALICO_DISABLE_FILE_LOGGING,Value:false,ValueFrom:nil,},EnvVar{Name:FELIX_DEFAULTENDPOINTTOHOSTACTION,Value:ACCEPT,ValueFrom:nil,},EnvVar{Name:FELIX_HEALTHENABLED,Value:true,ValueFrom:nil,},EnvVar{Name:FELIX_HEALTHPORT,Value:9099,ValueFrom:nil,},EnvVar{Name:NODENAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},EnvVar{Name:NAMESPACE,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:metadata.namespace,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},EnvVar{Name:FELIX_TYPHAK8SNAMESPACE,Value:calico-system,ValueFrom:nil,},EnvVar{Name:FELIX_TYPHAK8SSERVICENAME,Value:calico-typha,ValueFrom:nil,},EnvVar{Name:FELIX_TYPHACAFILE,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:FELIX_TYPHACERTFILE,Value:/node-certs/tls.crt,ValueFrom:nil,},EnvVar{Name:FELIX_TYPHAKEYFILE,Value:/node-certs/tls.key,ValueFrom:nil,},EnvVar{Name:FIPS_MODE_ENABLED,Value:false,ValueFrom:nil,},EnvVar{Name:FELIX_TYPHACN,Value:typha-server,ValueFrom:nil,},EnvVar{Name:CALICO_MANAGE_CNI,Value:true,ValueFrom:nil,},EnvVar{Name:CALICO_IPV4POOL_CIDR,Value:192.168.0.0/17,ValueFrom:nil,},EnvVar{Name:CALICO_IPV4POOL_VXLAN,Value:CrossSubnet,ValueFrom:nil,},EnvVar{Name:CALICO_IPV4POOL_BLOCK_SIZE,Value:26,ValueFrom:nil,},EnvVar{Name:CALICO_IPV4POOL_NODE_SELECTOR,Value:all(),ValueFrom:nil,},EnvVar{Name:CALICO_IPV4POOL_DISABLE_BGP_EXPORT,Value:false,ValueFrom:nil,},EnvVar{Name:CALICO_NETWORKING_BACKEND,Value:bird,ValueFrom:nil,},EnvVar{Name:IP,Value:autodetect,ValueFrom:nil,},EnvVar{Name:IP_AUTODETECTION_METHOD,Value:first-found,ValueFrom:nil,},EnvVar{Name:IP6,Value:none,ValueFrom:nil,},EnvVar{Name:FELIX_IPV6SUPPORT,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:lib-modules,ReadOnly:true,MountPath:/lib/modules,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:xtables-lock,ReadOnly:false,MountPath:/run/xtables.lock,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:policysync,ReadOnly:false,MountPath:/var/run/nodeagent,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs/,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:node-certs,ReadOnly:true,MountPath:/node-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:var-run-calico,ReadOnly:false,MountPath:/var/run/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:var-lib-calico,ReadOnly:false,MountPath:/var/lib/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-log-dir,ReadOnly:false,MountPath:/var/log/calico/cni,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-net-dir,ReadOnly:false,MountPath:/host/etc/cni/net.d,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-mw8nf,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/liveness,Port:{0 9099 },Host:localhost,Scheme:HTTP,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/bin/calico-node -bird-ready -felix-ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:&Lifecycle{PostStart:nil,PreStop:&LifecycleHandler{Exec:&ExecAction{Command:[/bin/calico-node -shutdown],},HTTPGet:nil,TCPSocket:nil,},},TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-node-qmpkh_calico-system(33477ebd-279d-4a8f-b897-f51161740c31): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node:v3.25.0": failed to extract layer sha256:9121b18510c3d8c839b48cf5132458a282491298179ea29e81ad155e282f151f: mount callback failed on /var/lib/containerd/tmpmounts/containerd-mount844849405: write /var/lib/containerd/tmpmounts/containerd-mount844849405/usr/lib/calico/bpf/test_to_nat_fib_debug.o: no space left on device: unknown Oct 2 18:46:10.184988 kubelet[2045]: E1002 18:46:10.184969 2045 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-node\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node:v3.25.0\\\": failed to extract layer sha256:9121b18510c3d8c839b48cf5132458a282491298179ea29e81ad155e282f151f: mount callback failed on /var/lib/containerd/tmpmounts/containerd-mount844849405: write /var/lib/containerd/tmpmounts/containerd-mount844849405/usr/lib/calico/bpf/test_to_nat_fib_debug.o: no space left on device: unknown\"" pod="calico-system/calico-node-qmpkh" podUID=33477ebd-279d-4a8f-b897-f51161740c31 Oct 2 18:46:10.236196 env[1139]: time="2023-10-02T18:46:10.236143925Z" level=info msg="RemoveImage \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\" returns successfully" Oct 2 18:46:10.236932 kubelet[2045]: I1002 18:46:10.236909 2045 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb" size=80539316 Oct 2 18:46:10.243914 env[1139]: time="2023-10-02T18:46:10.243851193Z" level=info msg="RemoveImage \"sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb\"" Oct 2 18:46:10.246516 env[1139]: time="2023-10-02T18:46:10.245035681Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd:3.5.6-0,XXX_unrecognized:[],}" Oct 2 18:46:10.246516 env[1139]: time="2023-10-02T18:46:10.246106804Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,XXX_unrecognized:[],}" Oct 2 18:46:10.248379 env[1139]: time="2023-10-02T18:46:10.248336893Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb,XXX_unrecognized:[],}" Oct 2 18:46:10.292582 env[1139]: time="2023-10-02T18:46:10.292530782Z" level=info msg="RemoveImage \"sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb\" returns successfully" Oct 2 18:46:10.293056 kubelet[2045]: I1002 18:46:10.293027 2045 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e" size=253553 Oct 2 18:46:10.293318 env[1139]: time="2023-10-02T18:46:10.293290213Z" level=info msg="RemoveImage \"sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e\"" Oct 2 18:46:10.330237 env[1139]: time="2023-10-02T18:46:10.330166249Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause:3.6,XXX_unrecognized:[],}" Oct 2 18:46:10.331081 env[1139]: time="2023-10-02T18:46:10.331052204Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,XXX_unrecognized:[],}" Oct 2 18:46:10.332884 env[1139]: time="2023-10-02T18:46:10.332859437Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,XXX_unrecognized:[],}" Oct 2 18:46:10.337991 env[1139]: time="2023-10-02T18:46:10.335800994Z" level=info msg="RemoveImage \"sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e\" returns successfully" Oct 2 18:46:10.350302 kubelet[2045]: I1002 18:46:10.350257 2045 eviction_manager.go:352] "Eviction manager: able to reduce resource pressure without evicting pods." resourceName="ephemeral-storage" Oct 2 18:46:10.924530 kubelet[2045]: E1002 18:46:10.923122 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:10.924530 kubelet[2045]: E1002 18:46:10.923846 2045 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-node\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node:v3.25.0\\\"\"" pod="calico-system/calico-node-qmpkh" podUID=33477ebd-279d-4a8f-b897-f51161740c31 Oct 2 18:46:19.833807 env[1139]: time="2023-10-02T18:46:19.833471951Z" level=info msg="StopPodSandbox for \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\"" Oct 2 18:46:19.834140 env[1139]: time="2023-10-02T18:46:19.834045249Z" level=info msg="StopPodSandbox for \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\"" Oct 2 18:46:19.864226 env[1139]: time="2023-10-02T18:46:19.864150956Z" level=error msg="StopPodSandbox for \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\" failed" error="failed to destroy network for sandbox \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:19.864402 kubelet[2045]: E1002 18:46:19.864378 2045 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Oct 2 18:46:19.864687 kubelet[2045]: E1002 18:46:19.864424 2045 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7} Oct 2 18:46:19.864687 kubelet[2045]: E1002 18:46:19.864484 2045 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4651c191-e5a5-43a3-92a0-4e8af059654c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 18:46:19.864687 kubelet[2045]: E1002 18:46:19.864527 2045 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4651c191-e5a5-43a3-92a0-4e8af059654c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-69c848ddc6-lmcp7" podUID=4651c191-e5a5-43a3-92a0-4e8af059654c Oct 2 18:46:19.871277 env[1139]: time="2023-10-02T18:46:19.871207138Z" level=error msg="StopPodSandbox for \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\" failed" error="failed to destroy network for sandbox \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:19.871474 kubelet[2045]: E1002 18:46:19.871432 2045 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Oct 2 18:46:19.871530 kubelet[2045]: E1002 18:46:19.871494 2045 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe} Oct 2 18:46:19.871560 kubelet[2045]: E1002 18:46:19.871538 2045 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"dfc00849-f8bc-438a-a6e0-f12214fdbed2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 18:46:19.871609 kubelet[2045]: E1002 18:46:19.871566 2045 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"dfc00849-f8bc-438a-a6e0-f12214fdbed2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-787d4945fb-c2tbt" podUID=dfc00849-f8bc-438a-a6e0-f12214fdbed2 Oct 2 18:46:20.834693 env[1139]: time="2023-10-02T18:46:20.834634147Z" level=info msg="StopPodSandbox for \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\"" Oct 2 18:46:20.839946 env[1139]: time="2023-10-02T18:46:20.839903188Z" level=info msg="StopPodSandbox for \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\"" Oct 2 18:46:20.890914 env[1139]: time="2023-10-02T18:46:20.890853350Z" level=error msg="StopPodSandbox for \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\" failed" error="failed to destroy network for sandbox \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:20.891157 kubelet[2045]: E1002 18:46:20.891130 2045 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Oct 2 18:46:20.891742 kubelet[2045]: E1002 18:46:20.891172 2045 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738} Oct 2 18:46:20.891742 kubelet[2045]: E1002 18:46:20.891207 2045 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"82f96fa7-627f-4c7d-935f-b21d213344a8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 18:46:20.891742 kubelet[2045]: E1002 18:46:20.891235 2045 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"82f96fa7-627f-4c7d-935f-b21d213344a8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-787d4945fb-bbgkt" podUID=82f96fa7-627f-4c7d-935f-b21d213344a8 Oct 2 18:46:20.900893 env[1139]: time="2023-10-02T18:46:20.900832176Z" level=error msg="StopPodSandbox for \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\" failed" error="failed to destroy network for sandbox \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:46:20.901213 kubelet[2045]: E1002 18:46:20.901188 2045 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Oct 2 18:46:20.901281 kubelet[2045]: E1002 18:46:20.901243 2045 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39} Oct 2 18:46:20.901281 kubelet[2045]: E1002 18:46:20.901277 2045 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"0ac531b4-60de-4c30-9e55-9511dd464d1f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 18:46:20.901366 kubelet[2045]: E1002 18:46:20.901315 2045 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"0ac531b4-60de-4c30-9e55-9511dd464d1f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-gxhfr" podUID=0ac531b4-60de-4c30-9e55-9511dd464d1f Oct 2 18:46:21.833311 kubelet[2045]: E1002 18:46:21.833272 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:21.836993 env[1139]: time="2023-10-02T18:46:21.836953342Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\"" Oct 2 18:46:25.482353 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1886934725.mount: Deactivated successfully. Oct 2 18:46:25.806795 env[1139]: time="2023-10-02T18:46:25.806068225Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:25.811170 env[1139]: time="2023-10-02T18:46:25.809957650Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8a2dff14388de51338e7468b834f0b37232379ce3cd97ac3c4a07b110a41ad00,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:25.815031 env[1139]: time="2023-10-02T18:46:25.813290540Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:25.815316 env[1139]: time="2023-10-02T18:46:25.815277233Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e898f4b7b55c908c88dad008ae939024e71ed93c5effbb10cca891b658b2f001,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:25.815620 env[1139]: time="2023-10-02T18:46:25.815587481Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\" returns image reference \"sha256:8a2dff14388de51338e7468b834f0b37232379ce3cd97ac3c4a07b110a41ad00\"" Oct 2 18:46:25.819503 env[1139]: time="2023-10-02T18:46:25.819469026Z" level=info msg="CreateContainer within sandbox \"d7ae0274039384e4bda72433fb1fdf721ee22133bffebff1a92dcb5177785b14\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Oct 2 18:46:25.833602 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2401661693.mount: Deactivated successfully. Oct 2 18:46:25.851111 env[1139]: time="2023-10-02T18:46:25.851048998Z" level=info msg="CreateContainer within sandbox \"d7ae0274039384e4bda72433fb1fdf721ee22133bffebff1a92dcb5177785b14\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"e43e7c8c3ad7181859774f9add1eddd9dbd37a1d173352226233da485213f578\"" Oct 2 18:46:25.851969 env[1139]: time="2023-10-02T18:46:25.851939182Z" level=info msg="StartContainer for \"e43e7c8c3ad7181859774f9add1eddd9dbd37a1d173352226233da485213f578\"" Oct 2 18:46:25.871783 systemd[1]: Started cri-containerd-e43e7c8c3ad7181859774f9add1eddd9dbd37a1d173352226233da485213f578.scope. Oct 2 18:46:25.939000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.940586 kernel: kauditd_printk_skb: 34 callbacks suppressed Oct 2 18:46:25.940669 kernel: audit: type=1400 audit(1696272385.939:1111): avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.939000 audit[3185]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2546 pid=3185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:25.945139 kernel: audit: type=1300 audit(1696272385.939:1111): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2546 pid=3185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:25.945204 kernel: audit: type=1327 audit(1696272385.939:1111): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534336537633863336164373138313835393737346639616464316564 Oct 2 18:46:25.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534336537633863336164373138313835393737346639616464316564 Oct 2 18:46:25.947617 kernel: audit: type=1400 audit(1696272385.939:1112): avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.939000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.949317 kernel: audit: type=1400 audit(1696272385.939:1112): avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.939000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.939000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.953067 kernel: audit: type=1400 audit(1696272385.939:1112): avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.953147 kernel: audit: type=1400 audit(1696272385.939:1112): avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.939000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.939000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.956457 kernel: audit: type=1400 audit(1696272385.939:1112): avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.956536 kernel: audit: type=1400 audit(1696272385.939:1112): avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.939000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.939000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.959723 kernel: audit: type=1400 audit(1696272385.939:1112): avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.939000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.939000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.939000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.939000 audit: BPF prog-id=139 op=LOAD Oct 2 18:46:25.939000 audit[3185]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2546 pid=3185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:25.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534336537633863336164373138313835393737346639616464316564 Oct 2 18:46:25.940000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.940000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.940000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.940000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.940000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.940000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.940000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.940000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.940000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.940000 audit: BPF prog-id=140 op=LOAD Oct 2 18:46:25.940000 audit[3185]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2546 pid=3185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:25.940000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534336537633863336164373138313835393737346639616464316564 Oct 2 18:46:25.942000 audit: BPF prog-id=140 op=UNLOAD Oct 2 18:46:25.942000 audit: BPF prog-id=139 op=UNLOAD Oct 2 18:46:25.942000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.942000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.942000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.942000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.942000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.942000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.942000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.942000 audit[3185]: AVC avc: denied { perfmon } for pid=3185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.942000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.942000 audit[3185]: AVC avc: denied { bpf } for pid=3185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:25.942000 audit: BPF prog-id=141 op=LOAD Oct 2 18:46:25.942000 audit[3185]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2546 pid=3185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:25.942000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534336537633863336164373138313835393737346639616464316564 Oct 2 18:46:25.970122 env[1139]: time="2023-10-02T18:46:25.969492353Z" level=info msg="StartContainer for \"e43e7c8c3ad7181859774f9add1eddd9dbd37a1d173352226233da485213f578\" returns successfully" Oct 2 18:46:26.201707 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Oct 2 18:46:26.201802 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Oct 2 18:46:26.964936 kubelet[2045]: E1002 18:46:26.964859 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:26.980670 systemd[1]: run-containerd-runc-k8s.io-e43e7c8c3ad7181859774f9add1eddd9dbd37a1d173352226233da485213f578-runc.aOPUoR.mount: Deactivated successfully. Oct 2 18:46:26.984292 kubelet[2045]: I1002 18:46:26.983194 2045 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-qmpkh" podStartSLOduration=-9.22337200687163e+09 pod.CreationTimestamp="2023-10-02 18:45:57 +0000 UTC" firstStartedPulling="2023-10-02 18:45:57.580271323 +0000 UTC m=+17.872393852" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:46:26.982479618 +0000 UTC m=+47.274602107" watchObservedRunningTime="2023-10-02 18:46:26.983146875 +0000 UTC m=+47.275269404" Oct 2 18:46:27.522000 audit[3328]: AVC avc: denied { write } for pid=3328 comm="tee" name="fd" dev="proc" ino=18423 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:46:27.522000 audit[3328]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc7727995 a2=241 a3=1b6 items=1 ppid=3280 pid=3328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:27.522000 audit: CWD cwd="/etc/service/enabled/cni/log" Oct 2 18:46:27.522000 audit: PATH item=0 name="/dev/fd/63" inode=19634 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 18:46:27.522000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 18:46:27.525000 audit[3333]: AVC avc: denied { write } for pid=3333 comm="tee" name="fd" dev="proc" ino=18953 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:46:27.525000 audit[3333]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff161f993 a2=241 a3=1b6 items=1 ppid=3287 pid=3333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:27.525000 audit: CWD cwd="/etc/service/enabled/felix/log" Oct 2 18:46:27.525000 audit: PATH item=0 name="/dev/fd/63" inode=18420 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 18:46:27.525000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 18:46:27.542000 audit[3339]: AVC avc: denied { write } for pid=3339 comm="tee" name="fd" dev="proc" ino=19648 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:46:27.542000 audit[3339]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe23c6993 a2=241 a3=1b6 items=1 ppid=3276 pid=3339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:27.542000 audit: CWD cwd="/etc/service/enabled/bird6/log" Oct 2 18:46:27.542000 audit: PATH item=0 name="/dev/fd/63" inode=20642 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 18:46:27.542000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 18:46:27.549000 audit[3362]: AVC avc: denied { write } for pid=3362 comm="tee" name="fd" dev="proc" ino=21507 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:46:27.549000 audit[3362]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd2dd6993 a2=241 a3=1b6 items=1 ppid=3283 pid=3362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:27.549000 audit: CWD cwd="/etc/service/enabled/confd/log" Oct 2 18:46:27.549000 audit: PATH item=0 name="/dev/fd/63" inode=19650 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 18:46:27.549000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 18:46:27.556000 audit[3365]: AVC avc: denied { write } for pid=3365 comm="tee" name="fd" dev="proc" ino=20653 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:46:27.556000 audit[3365]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffea415994 a2=241 a3=1b6 items=1 ppid=3285 pid=3365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:27.556000 audit: CWD cwd="/etc/service/enabled/bird/log" Oct 2 18:46:27.556000 audit: PATH item=0 name="/dev/fd/63" inode=18960 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 18:46:27.556000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 18:46:27.558000 audit[3369]: AVC avc: denied { write } for pid=3369 comm="tee" name="fd" dev="proc" ino=19654 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:46:27.558000 audit[3369]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcaa63984 a2=241 a3=1b6 items=1 ppid=3321 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:27.558000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Oct 2 18:46:27.558000 audit: PATH item=0 name="/dev/fd/63" inode=19651 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 18:46:27.558000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 18:46:27.581000 audit[3351]: AVC avc: denied { write } for pid=3351 comm="tee" name="fd" dev="proc" ino=19663 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:46:27.581000 audit[3351]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffff078983 a2=241 a3=1b6 items=1 ppid=3278 pid=3351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:27.581000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Oct 2 18:46:27.581000 audit: PATH item=0 name="/dev/fd/63" inode=20645 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 18:46:27.581000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 18:46:27.861000 audit[3448]: AVC avc: denied { bpf } for pid=3448 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.861000 audit[3448]: AVC avc: denied { bpf } for pid=3448 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.861000 audit[3448]: AVC avc: denied { perfmon } for pid=3448 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.861000 audit[3448]: AVC avc: denied { perfmon } for pid=3448 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.861000 audit[3448]: AVC avc: denied { perfmon } for pid=3448 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.861000 audit[3448]: AVC avc: denied { perfmon } for pid=3448 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.861000 audit[3448]: AVC avc: denied { perfmon } for pid=3448 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.861000 audit[3448]: AVC avc: denied { bpf } for pid=3448 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.861000 audit[3448]: AVC avc: denied { bpf } for pid=3448 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.861000 audit: BPF prog-id=142 op=LOAD Oct 2 18:46:27.861000 audit[3448]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc99e80a8 a2=70 a3=0 items=0 ppid=3289 pid=3448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:27.861000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 18:46:27.864000 audit: BPF prog-id=142 op=UNLOAD Oct 2 18:46:27.864000 audit[3448]: AVC avc: denied { bpf } for pid=3448 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.864000 audit[3448]: AVC avc: denied { bpf } for pid=3448 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.864000 audit[3448]: AVC avc: denied { perfmon } for pid=3448 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.864000 audit[3448]: AVC avc: denied { perfmon } for pid=3448 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.864000 audit[3448]: AVC avc: denied { perfmon } for pid=3448 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.864000 audit[3448]: AVC avc: denied { perfmon } for pid=3448 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.864000 audit[3448]: AVC avc: denied { perfmon } for pid=3448 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.864000 audit[3448]: AVC avc: denied { bpf } for pid=3448 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.864000 audit[3448]: AVC avc: denied { bpf } for pid=3448 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.864000 audit: BPF prog-id=143 op=LOAD Oct 2 18:46:27.864000 audit[3448]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc99e80a8 a2=70 a3=4a174c items=0 ppid=3289 pid=3448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:27.864000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 18:46:27.864000 audit: BPF prog-id=143 op=UNLOAD Oct 2 18:46:27.864000 audit[3448]: AVC avc: denied { bpf } for pid=3448 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.864000 audit[3448]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffc99e80d8 a2=70 a3=2672479f items=0 ppid=3289 pid=3448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:27.864000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 18:46:27.865000 audit[3448]: AVC avc: denied { bpf } for pid=3448 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.865000 audit[3448]: AVC avc: denied { bpf } for pid=3448 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.865000 audit[3448]: AVC avc: denied { bpf } for pid=3448 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.865000 audit[3448]: AVC avc: denied { perfmon } for pid=3448 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.865000 audit[3448]: AVC avc: denied { perfmon } for pid=3448 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.865000 audit[3448]: AVC avc: denied { perfmon } for pid=3448 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.865000 audit[3448]: AVC avc: denied { perfmon } for pid=3448 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.865000 audit[3448]: AVC avc: denied { perfmon } for pid=3448 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.865000 audit[3448]: AVC avc: denied { bpf } for pid=3448 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.865000 audit[3448]: AVC avc: denied { bpf } for pid=3448 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.865000 audit: BPF prog-id=144 op=LOAD Oct 2 18:46:27.865000 audit[3448]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffc99e8028 a2=70 a3=267247b9 items=0 ppid=3289 pid=3448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:27.865000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 18:46:27.882000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.882000 audit[3457]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc3960ef8 a2=70 a3=0 items=0 ppid=3289 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:27.882000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 18:46:27.882000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:27.882000 audit[3457]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc3960dd8 a2=70 a3=2 items=0 ppid=3289 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:27.882000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 18:46:27.890000 audit: BPF prog-id=144 op=UNLOAD Oct 2 18:46:27.967304 kubelet[2045]: E1002 18:46:27.966906 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:27.984123 systemd[1]: run-containerd-runc-k8s.io-e43e7c8c3ad7181859774f9add1eddd9dbd37a1d173352226233da485213f578-runc.jMEF8x.mount: Deactivated successfully. Oct 2 18:46:27.991000 audit[3485]: NETFILTER_CFG table=raw:111 family=2 entries=19 op=nft_register_chain pid=3485 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:46:27.991000 audit[3485]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6132 a0=3 a1=fffffcf7e9c0 a2=0 a3=ffffbc723fa0 items=0 ppid=3289 pid=3485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:27.991000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:46:27.992000 audit[3486]: NETFILTER_CFG table=mangle:112 family=2 entries=19 op=nft_register_chain pid=3486 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:46:27.992000 audit[3486]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6800 a0=3 a1=ffffcbdc5e10 a2=0 a3=ffffb5b4bfa0 items=0 ppid=3289 pid=3486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:27.992000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:46:27.998000 audit[3487]: NETFILTER_CFG table=nat:113 family=2 entries=16 op=nft_register_chain pid=3487 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:46:27.998000 audit[3487]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5188 a0=3 a1=ffffe4063be0 a2=0 a3=ffff9ac84fa0 items=0 ppid=3289 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:27.998000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:46:27.999000 audit[3492]: NETFILTER_CFG table=filter:114 family=2 entries=39 op=nft_register_chain pid=3492 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:46:27.999000 audit[3492]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=18472 a0=3 a1=ffffd8f86130 a2=0 a3=ffff858bcfa0 items=0 ppid=3289 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:27.999000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:46:28.721344 systemd-networkd[1040]: vxlan.calico: Link UP Oct 2 18:46:28.721349 systemd-networkd[1040]: vxlan.calico: Gained carrier Oct 2 18:46:30.384346 kubelet[2045]: I1002 18:46:30.384304 2045 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 18:46:30.384346 kubelet[2045]: I1002 18:46:30.384342 2045 container_gc.go:86] "Attempting to delete unused containers" Oct 2 18:46:30.388532 kubelet[2045]: I1002 18:46:30.388425 2045 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 18:46:30.402803 kubelet[2045]: I1002 18:46:30.402776 2045 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 18:46:30.403049 kubelet[2045]: I1002 18:46:30.402934 2045 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/coredns-787d4945fb-bbgkt calico-system/calico-kube-controllers-69c848ddc6-lmcp7 kube-system/coredns-787d4945fb-c2tbt calico-system/csi-node-driver-gxhfr kube-system/kube-controller-manager-localhost tigera-operator/tigera-operator-54b47459dd-85r9n kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost calico-system/calico-typha-5ccdfc8548-2dvzp calico-system/calico-node-qmpkh kube-system/kube-proxy-klg9c]" Oct 2 18:46:30.403307 kubelet[2045]: E1002 18:46:30.403277 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-787d4945fb-bbgkt" Oct 2 18:46:30.403307 kubelet[2045]: E1002 18:46:30.403302 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-kube-controllers-69c848ddc6-lmcp7" Oct 2 18:46:30.403394 kubelet[2045]: E1002 18:46:30.403326 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-787d4945fb-c2tbt" Oct 2 18:46:30.403394 kubelet[2045]: E1002 18:46:30.403337 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-gxhfr" Oct 2 18:46:30.403501 kubelet[2045]: E1002 18:46:30.403490 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 18:46:30.404580 env[1139]: time="2023-10-02T18:46:30.404544937Z" level=info msg="StopContainer for \"f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86\" with timeout 30 (s)" Oct 2 18:46:30.405225 env[1139]: time="2023-10-02T18:46:30.405198393Z" level=info msg="Stop container \"f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86\" with signal terminated" Oct 2 18:46:30.425000 audit: BPF prog-id=117 op=UNLOAD Oct 2 18:46:30.425989 systemd[1]: cri-containerd-f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86.scope: Deactivated successfully. Oct 2 18:46:30.426290 systemd[1]: cri-containerd-f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86.scope: Consumed 2.568s CPU time. Oct 2 18:46:30.431000 audit: BPF prog-id=120 op=UNLOAD Oct 2 18:46:30.446159 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86-rootfs.mount: Deactivated successfully. Oct 2 18:46:30.647394 env[1139]: time="2023-10-02T18:46:30.647273081Z" level=info msg="shim disconnected" id=f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86 Oct 2 18:46:30.647394 env[1139]: time="2023-10-02T18:46:30.647321002Z" level=warning msg="cleaning up after shim disconnected" id=f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86 namespace=k8s.io Oct 2 18:46:30.647394 env[1139]: time="2023-10-02T18:46:30.647333043Z" level=info msg="cleaning up dead shim" Oct 2 18:46:30.655542 env[1139]: time="2023-10-02T18:46:30.655501477Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:46:30Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3550 runtime=io.containerd.runc.v2\n" Oct 2 18:46:30.657796 env[1139]: time="2023-10-02T18:46:30.657756291Z" level=info msg="StopContainer for \"f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86\" returns successfully" Oct 2 18:46:30.658421 env[1139]: time="2023-10-02T18:46:30.658380226Z" level=info msg="StopPodSandbox for \"33cb8c1272cb963b15cddf9f66892f5dc425c4f7c031790ee6802313444a2f99\"" Oct 2 18:46:30.658489 env[1139]: time="2023-10-02T18:46:30.658473628Z" level=info msg="Container to stop \"f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 18:46:30.659908 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-33cb8c1272cb963b15cddf9f66892f5dc425c4f7c031790ee6802313444a2f99-shm.mount: Deactivated successfully. Oct 2 18:46:30.667000 audit: BPF prog-id=110 op=UNLOAD Oct 2 18:46:30.667511 systemd[1]: cri-containerd-33cb8c1272cb963b15cddf9f66892f5dc425c4f7c031790ee6802313444a2f99.scope: Deactivated successfully. Oct 2 18:46:30.672000 audit: BPF prog-id=113 op=UNLOAD Oct 2 18:46:30.689507 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-33cb8c1272cb963b15cddf9f66892f5dc425c4f7c031790ee6802313444a2f99-rootfs.mount: Deactivated successfully. Oct 2 18:46:30.696518 env[1139]: time="2023-10-02T18:46:30.696467413Z" level=info msg="shim disconnected" id=33cb8c1272cb963b15cddf9f66892f5dc425c4f7c031790ee6802313444a2f99 Oct 2 18:46:30.696518 env[1139]: time="2023-10-02T18:46:30.696517455Z" level=warning msg="cleaning up after shim disconnected" id=33cb8c1272cb963b15cddf9f66892f5dc425c4f7c031790ee6802313444a2f99 namespace=k8s.io Oct 2 18:46:30.696720 env[1139]: time="2023-10-02T18:46:30.696529135Z" level=info msg="cleaning up dead shim" Oct 2 18:46:30.705409 env[1139]: time="2023-10-02T18:46:30.705354545Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:46:30Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3580 runtime=io.containerd.runc.v2\n" Oct 2 18:46:30.705738 env[1139]: time="2023-10-02T18:46:30.705712994Z" level=info msg="TearDown network for sandbox \"33cb8c1272cb963b15cddf9f66892f5dc425c4f7c031790ee6802313444a2f99\" successfully" Oct 2 18:46:30.705779 env[1139]: time="2023-10-02T18:46:30.705740994Z" level=info msg="StopPodSandbox for \"33cb8c1272cb963b15cddf9f66892f5dc425c4f7c031790ee6802313444a2f99\" returns successfully" Oct 2 18:46:30.710275 kubelet[2045]: I1002 18:46:30.710244 2045 eviction_manager.go:595] "Eviction manager: pod is evicted successfully" pod="tigera-operator/tigera-operator-54b47459dd-85r9n" Oct 2 18:46:30.710623 kubelet[2045]: I1002 18:46:30.710597 2045 eviction_manager.go:204] "Eviction manager: pods evicted, waiting for pod to be cleaned up" pods="[tigera-operator/tigera-operator-54b47459dd-85r9n]" Oct 2 18:46:30.729640 systemd-networkd[1040]: vxlan.calico: Gained IPv6LL Oct 2 18:46:30.833093 env[1139]: time="2023-10-02T18:46:30.832930545Z" level=info msg="StopPodSandbox for \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\"" Oct 2 18:46:30.855285 kubelet[2045]: I1002 18:46:30.855058 2045 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/6f141636-9b33-4bcd-80b0-8a1664766f1d-var-lib-calico\") pod \"6f141636-9b33-4bcd-80b0-8a1664766f1d\" (UID: \"6f141636-9b33-4bcd-80b0-8a1664766f1d\") " Oct 2 18:46:30.855285 kubelet[2045]: I1002 18:46:30.855129 2045 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-hmsnq\" (UniqueName: \"kubernetes.io/projected/6f141636-9b33-4bcd-80b0-8a1664766f1d-kube-api-access-hmsnq\") pod \"6f141636-9b33-4bcd-80b0-8a1664766f1d\" (UID: \"6f141636-9b33-4bcd-80b0-8a1664766f1d\") " Oct 2 18:46:30.858014 kubelet[2045]: I1002 18:46:30.857948 2045 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/6f141636-9b33-4bcd-80b0-8a1664766f1d-var-lib-calico" (OuterVolumeSpecName: "var-lib-calico") pod "6f141636-9b33-4bcd-80b0-8a1664766f1d" (UID: "6f141636-9b33-4bcd-80b0-8a1664766f1d"). InnerVolumeSpecName "var-lib-calico". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:46:30.861605 systemd[1]: var-lib-kubelet-pods-6f141636\x2d9b33\x2d4bcd\x2d80b0\x2d8a1664766f1d-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dhmsnq.mount: Deactivated successfully. Oct 2 18:46:30.863165 kubelet[2045]: I1002 18:46:30.863132 2045 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/6f141636-9b33-4bcd-80b0-8a1664766f1d-kube-api-access-hmsnq" (OuterVolumeSpecName: "kube-api-access-hmsnq") pod "6f141636-9b33-4bcd-80b0-8a1664766f1d" (UID: "6f141636-9b33-4bcd-80b0-8a1664766f1d"). InnerVolumeSpecName "kube-api-access-hmsnq". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 18:46:30.955783 kubelet[2045]: I1002 18:46:30.955742 2045 reconciler_common.go:295] "Volume detached for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/6f141636-9b33-4bcd-80b0-8a1664766f1d-var-lib-calico\") on node \"localhost\" DevicePath \"\"" Oct 2 18:46:30.955783 kubelet[2045]: I1002 18:46:30.955778 2045 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-hmsnq\" (UniqueName: \"kubernetes.io/projected/6f141636-9b33-4bcd-80b0-8a1664766f1d-kube-api-access-hmsnq\") on node \"localhost\" DevicePath \"\"" Oct 2 18:46:30.973480 kubelet[2045]: I1002 18:46:30.970985 2045 scope.go:115] "RemoveContainer" containerID="f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86" Oct 2 18:46:30.974618 systemd[1]: Removed slice kubepods-besteffort-pod6f141636_9b33_4bcd_80b0_8a1664766f1d.slice. Oct 2 18:46:30.974703 systemd[1]: kubepods-besteffort-pod6f141636_9b33_4bcd_80b0_8a1664766f1d.slice: Consumed 2.678s CPU time. Oct 2 18:46:30.976349 env[1139]: time="2023-10-02T18:46:30.976293161Z" level=info msg="RemoveContainer for \"f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86\"" Oct 2 18:46:31.032922 env[1139]: time="2023-10-02T18:46:31.032872091Z" level=info msg="RemoveContainer for \"f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86\" returns successfully" Oct 2 18:46:31.033801 kubelet[2045]: I1002 18:46:31.033775 2045 scope.go:115] "RemoveContainer" containerID="f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86" Oct 2 18:46:31.034211 env[1139]: time="2023-10-02T18:46:31.034112160Z" level=error msg="ContainerStatus for \"f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86\": not found" Oct 2 18:46:31.034486 kubelet[2045]: E1002 18:46:31.034468 2045 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86\": not found" containerID="f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86" Oct 2 18:46:31.034602 kubelet[2045]: I1002 18:46:31.034591 2045 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86} err="failed to get container status \"f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86\": rpc error: code = NotFound desc = an error occurred when try to find container \"f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86\": not found" Oct 2 18:46:31.034679 kubelet[2045]: I1002 18:46:31.034670 2045 scope.go:115] "RemoveContainer" containerID="f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86" Oct 2 18:46:31.034974 env[1139]: time="2023-10-02T18:46:31.034922779Z" level=error msg="ContainerStatus for \"f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86\": not found" Oct 2 18:46:31.035218 kubelet[2045]: I1002 18:46:31.035194 2045 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86} err="failed to get container status \"f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86\": rpc error: code = NotFound desc = an error occurred when try to find container \"f8d4ef2fef787ed4cdfc3032dbc93a1e78141fcc5132af2af0e7a418471f9b86\": not found" Oct 2 18:46:31.038625 env[1139]: 2023-10-02 18:46:30.905 [INFO][3610] k8s.go 576: Cleaning up netns ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Oct 2 18:46:31.038625 env[1139]: 2023-10-02 18:46:30.906 [INFO][3610] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" iface="eth0" netns="/var/run/netns/cni-aa7eec59-fe00-1e59-554c-0120f8997167" Oct 2 18:46:31.038625 env[1139]: 2023-10-02 18:46:30.906 [INFO][3610] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" iface="eth0" netns="/var/run/netns/cni-aa7eec59-fe00-1e59-554c-0120f8997167" Oct 2 18:46:31.038625 env[1139]: 2023-10-02 18:46:30.909 [INFO][3610] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" iface="eth0" netns="/var/run/netns/cni-aa7eec59-fe00-1e59-554c-0120f8997167" Oct 2 18:46:31.038625 env[1139]: 2023-10-02 18:46:30.909 [INFO][3610] k8s.go 583: Releasing IP address(es) ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Oct 2 18:46:31.038625 env[1139]: 2023-10-02 18:46:30.909 [INFO][3610] utils.go 196: Calico CNI releasing IP address ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Oct 2 18:46:31.038625 env[1139]: 2023-10-02 18:46:30.965 [INFO][3618] ipam_plugin.go 416: Releasing address using handleID ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" HandleID="k8s-pod-network.3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Workload="localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0" Oct 2 18:46:31.038625 env[1139]: time="2023-10-02T18:46:30Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:46:31.038625 env[1139]: time="2023-10-02T18:46:30Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:46:31.038625 env[1139]: 2023-10-02 18:46:30.992 [WARNING][3618] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" HandleID="k8s-pod-network.3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Workload="localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0" Oct 2 18:46:31.038625 env[1139]: 2023-10-02 18:46:30.993 [INFO][3618] ipam_plugin.go 444: Releasing address using workloadID ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" HandleID="k8s-pod-network.3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Workload="localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0" Oct 2 18:46:31.038625 env[1139]: time="2023-10-02T18:46:31Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:46:31.038625 env[1139]: 2023-10-02 18:46:31.036 [INFO][3610] k8s.go 589: Teardown processing complete. ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Oct 2 18:46:31.039212 env[1139]: time="2023-10-02T18:46:31.038730147Z" level=info msg="TearDown network for sandbox \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\" successfully" Oct 2 18:46:31.039212 env[1139]: time="2023-10-02T18:46:31.038756708Z" level=info msg="StopPodSandbox for \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\" returns successfully" Oct 2 18:46:31.044779 env[1139]: time="2023-10-02T18:46:31.039581967Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69c848ddc6-lmcp7,Uid:4651c191-e5a5-43a3-92a0-4e8af059654c,Namespace:calico-system,Attempt:1,}" Oct 2 18:46:31.040795 systemd[1]: run-netns-cni\x2daa7eec59\x2dfe00\x2d1e59\x2d554c\x2d0120f8997167.mount: Deactivated successfully. Oct 2 18:46:31.045003 kubelet[2045]: I1002 18:46:31.040713 2045 eviction_manager.go:173] "Failed to admit pod to node" pod="tigera-operator/tigera-operator-54b47459dd-s9pjc" nodeCondition=[DiskPressure] Oct 2 18:46:31.063873 kubelet[2045]: I1002 18:46:31.063658 2045 eviction_manager.go:173] "Failed to admit pod to node" pod="tigera-operator/tigera-operator-54b47459dd-wnktg" nodeCondition=[DiskPressure] Oct 2 18:46:31.081168 kubelet[2045]: I1002 18:46:31.080892 2045 eviction_manager.go:173] "Failed to admit pod to node" pod="tigera-operator/tigera-operator-54b47459dd-85f5n" nodeCondition=[DiskPressure] Oct 2 18:46:31.096677 kubelet[2045]: I1002 18:46:31.096571 2045 eviction_manager.go:173] "Failed to admit pod to node" pod="tigera-operator/tigera-operator-54b47459dd-nbgqf" nodeCondition=[DiskPressure] Oct 2 18:46:31.187418 kubelet[2045]: I1002 18:46:31.187104 2045 eviction_manager.go:173] "Failed to admit pod to node" pod="tigera-operator/tigera-operator-54b47459dd-w92hn" nodeCondition=[DiskPressure] Oct 2 18:46:31.361074 env[1139]: time="2023-10-02T18:46:31.360955241Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:31.363342 env[1139]: time="2023-10-02T18:46:31.363305896Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:31.364727 env[1139]: time="2023-10-02T18:46:31.364695688Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:31.366382 env[1139]: time="2023-10-02T18:46:31.366344807Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:31.502606 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 18:46:31.502742 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali004e0a7e71e: link becomes ready Oct 2 18:46:31.511972 systemd-networkd[1040]: cali004e0a7e71e: Link UP Oct 2 18:46:31.511982 systemd-networkd[1040]: cali004e0a7e71e: Gained carrier Oct 2 18:46:31.528188 env[1139]: 2023-10-02 18:46:31.419 [INFO][3626] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0 calico-kube-controllers-69c848ddc6- calico-system 4651c191-e5a5-43a3-92a0-4e8af059654c 735 0 2023-10-02 18:45:57 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:69c848ddc6 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-69c848ddc6-lmcp7 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali004e0a7e71e [] []}} ContainerID="af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-lmcp7" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-" Oct 2 18:46:31.528188 env[1139]: 2023-10-02 18:46:31.420 [INFO][3626] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-lmcp7" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0" Oct 2 18:46:31.528188 env[1139]: 2023-10-02 18:46:31.454 [INFO][3638] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b" HandleID="k8s-pod-network.af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b" Workload="localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0" Oct 2 18:46:31.528188 env[1139]: 2023-10-02 18:46:31.466 [INFO][3638] ipam_plugin.go 269: Auto assigning IP ContainerID="af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b" HandleID="k8s-pod-network.af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b" Workload="localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000531720), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-69c848ddc6-lmcp7", "timestamp":"2023-10-02 18:46:31.454013766 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 18:46:31.528188 env[1139]: time="2023-10-02T18:46:31Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:46:31.528188 env[1139]: time="2023-10-02T18:46:31Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:46:31.528188 env[1139]: 2023-10-02 18:46:31.467 [INFO][3638] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 2 18:46:31.528188 env[1139]: 2023-10-02 18:46:31.468 [INFO][3638] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b" host="localhost" Oct 2 18:46:31.528188 env[1139]: 2023-10-02 18:46:31.473 [INFO][3638] ipam.go 372: Looking up existing affinities for host host="localhost" Oct 2 18:46:31.528188 env[1139]: 2023-10-02 18:46:31.477 [INFO][3638] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Oct 2 18:46:31.528188 env[1139]: 2023-10-02 18:46:31.478 [INFO][3638] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 2 18:46:31.528188 env[1139]: 2023-10-02 18:46:31.480 [INFO][3638] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 2 18:46:31.528188 env[1139]: 2023-10-02 18:46:31.481 [INFO][3638] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b" host="localhost" Oct 2 18:46:31.528188 env[1139]: 2023-10-02 18:46:31.482 [INFO][3638] ipam.go 1682: Creating new handle: k8s-pod-network.af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b Oct 2 18:46:31.528188 env[1139]: 2023-10-02 18:46:31.487 [INFO][3638] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b" host="localhost" Oct 2 18:46:31.528188 env[1139]: 2023-10-02 18:46:31.492 [INFO][3638] ipam.go 1216: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b" host="localhost" Oct 2 18:46:31.528188 env[1139]: 2023-10-02 18:46:31.492 [INFO][3638] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b" host="localhost" Oct 2 18:46:31.528188 env[1139]: time="2023-10-02T18:46:31Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:46:31.528188 env[1139]: 2023-10-02 18:46:31.492 [INFO][3638] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b" HandleID="k8s-pod-network.af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b" Workload="localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0" Oct 2 18:46:31.529032 env[1139]: 2023-10-02 18:46:31.497 [INFO][3626] k8s.go 383: Populated endpoint ContainerID="af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-lmcp7" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0", GenerateName:"calico-kube-controllers-69c848ddc6-", Namespace:"calico-system", SelfLink:"", UID:"4651c191-e5a5-43a3-92a0-4e8af059654c", ResourceVersion:"735", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 45, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69c848ddc6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-69c848ddc6-lmcp7", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali004e0a7e71e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:46:31.529032 env[1139]: 2023-10-02 18:46:31.497 [INFO][3626] k8s.go 384: Calico CNI using IPs: [192.168.88.129/32] ContainerID="af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-lmcp7" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0" Oct 2 18:46:31.529032 env[1139]: 2023-10-02 18:46:31.497 [INFO][3626] dataplane_linux.go 68: Setting the host side veth name to cali004e0a7e71e ContainerID="af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-lmcp7" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0" Oct 2 18:46:31.529032 env[1139]: 2023-10-02 18:46:31.502 [INFO][3626] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-lmcp7" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0" Oct 2 18:46:31.529032 env[1139]: 2023-10-02 18:46:31.512 [INFO][3626] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-lmcp7" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0", GenerateName:"calico-kube-controllers-69c848ddc6-", Namespace:"calico-system", SelfLink:"", UID:"4651c191-e5a5-43a3-92a0-4e8af059654c", ResourceVersion:"735", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 45, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69c848ddc6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b", Pod:"calico-kube-controllers-69c848ddc6-lmcp7", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali004e0a7e71e", MAC:"56:fb:36:ce:a1:a2", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:46:31.529032 env[1139]: 2023-10-02 18:46:31.521 [INFO][3626] k8s.go 489: Wrote updated endpoint to datastore ContainerID="af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-lmcp7" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0" Oct 2 18:46:31.540000 audit[3660]: NETFILTER_CFG table=filter:115 family=2 entries=36 op=nft_register_chain pid=3660 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:46:31.541678 kernel: kauditd_printk_skb: 133 callbacks suppressed Oct 2 18:46:31.541761 kernel: audit: type=1325 audit(1696272391.540:1141): table=filter:115 family=2 entries=36 op=nft_register_chain pid=3660 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:46:31.540000 audit[3660]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19908 a0=3 a1=ffffd7d81b80 a2=0 a3=ffff8e69dfa0 items=0 ppid=3289 pid=3660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:31.545551 kernel: audit: type=1300 audit(1696272391.540:1141): arch=c00000b7 syscall=211 success=yes exit=19908 a0=3 a1=ffffd7d81b80 a2=0 a3=ffff8e69dfa0 items=0 ppid=3289 pid=3660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:31.545629 kernel: audit: type=1327 audit(1696272391.540:1141): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:46:31.540000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:46:31.548579 env[1139]: time="2023-10-02T18:46:31.548517523Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:46:31.548579 env[1139]: time="2023-10-02T18:46:31.548557044Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:46:31.548579 env[1139]: time="2023-10-02T18:46:31.548567805Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:46:31.548800 env[1139]: time="2023-10-02T18:46:31.548759489Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b pid=3669 runtime=io.containerd.runc.v2 Oct 2 18:46:31.563600 systemd[1]: Started cri-containerd-af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b.scope. Oct 2 18:46:31.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.585586 kernel: audit: type=1400 audit(1696272391.581:1142): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.585668 kernel: audit: type=1400 audit(1696272391.581:1143): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.585689 kernel: audit: type=1400 audit(1696272391.581:1144): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.589053 kubelet[2045]: I1002 18:46:31.588955 2045 eviction_manager.go:173] "Failed to admit pod to node" pod="tigera-operator/tigera-operator-54b47459dd-75bvv" nodeCondition=[DiskPressure] Oct 2 18:46:31.589480 kernel: audit: type=1400 audit(1696272391.581:1145): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591381 kernel: audit: type=1400 audit(1696272391.581:1146): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.594389 kernel: audit: type=1400 audit(1696272391.581:1147): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.596338 kernel: audit: type=1400 audit(1696272391.581:1148): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.583000 audit: BPF prog-id=145 op=LOAD Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3669 pid=3678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:31.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166326131633635663363396533623462306136376637353661363662 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3669 pid=3678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:31.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166326131633635663363396533623462306136376637353661363662 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit: BPF prog-id=146 op=LOAD Oct 2 18:46:31.591000 audit[3678]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3669 pid=3678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:31.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166326131633635663363396533623462306136376637353661363662 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit: BPF prog-id=147 op=LOAD Oct 2 18:46:31.591000 audit[3678]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3669 pid=3678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:31.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166326131633635663363396533623462306136376637353661363662 Oct 2 18:46:31.591000 audit: BPF prog-id=147 op=UNLOAD Oct 2 18:46:31.591000 audit: BPF prog-id=146 op=UNLOAD Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:31.591000 audit: BPF prog-id=148 op=LOAD Oct 2 18:46:31.591000 audit[3678]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3669 pid=3678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:31.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166326131633635663363396533623462306136376637353661363662 Oct 2 18:46:31.596635 systemd-resolved[1085]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 18:46:31.621604 env[1139]: time="2023-10-02T18:46:31.621502781Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69c848ddc6-lmcp7,Uid:4651c191-e5a5-43a3-92a0-4e8af059654c,Namespace:calico-system,Attempt:1,} returns sandbox id \"af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b\"" Oct 2 18:46:31.624509 env[1139]: time="2023-10-02T18:46:31.624480490Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\"" Oct 2 18:46:31.711743 kubelet[2045]: I1002 18:46:31.711713 2045 eviction_manager.go:426] "Eviction manager: pods successfully cleaned up" pods="[tigera-operator/tigera-operator-54b47459dd-85r9n]" Oct 2 18:46:31.722886 kubelet[2045]: I1002 18:46:31.722450 2045 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 18:46:31.722886 kubelet[2045]: I1002 18:46:31.722485 2045 container_gc.go:86] "Attempting to delete unused containers" Oct 2 18:46:31.724409 env[1139]: time="2023-10-02T18:46:31.724373013Z" level=info msg="StopPodSandbox for \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\"" Oct 2 18:46:31.803526 env[1139]: 2023-10-02 18:46:31.762 [WARNING][3717] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0", GenerateName:"calico-kube-controllers-69c848ddc6-", Namespace:"calico-system", SelfLink:"", UID:"4651c191-e5a5-43a3-92a0-4e8af059654c", ResourceVersion:"789", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 45, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69c848ddc6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b", Pod:"calico-kube-controllers-69c848ddc6-lmcp7", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali004e0a7e71e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:46:31.803526 env[1139]: 2023-10-02 18:46:31.763 [INFO][3717] k8s.go 576: Cleaning up netns ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Oct 2 18:46:31.803526 env[1139]: 2023-10-02 18:46:31.763 [INFO][3717] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" iface="eth0" netns="" Oct 2 18:46:31.803526 env[1139]: 2023-10-02 18:46:31.763 [INFO][3717] k8s.go 583: Releasing IP address(es) ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Oct 2 18:46:31.803526 env[1139]: 2023-10-02 18:46:31.763 [INFO][3717] utils.go 196: Calico CNI releasing IP address ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Oct 2 18:46:31.803526 env[1139]: 2023-10-02 18:46:31.787 [INFO][3724] ipam_plugin.go 416: Releasing address using handleID ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" HandleID="k8s-pod-network.3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Workload="localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0" Oct 2 18:46:31.803526 env[1139]: time="2023-10-02T18:46:31Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:46:31.803526 env[1139]: time="2023-10-02T18:46:31Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:46:31.803526 env[1139]: 2023-10-02 18:46:31.797 [WARNING][3724] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" HandleID="k8s-pod-network.3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Workload="localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0" Oct 2 18:46:31.803526 env[1139]: 2023-10-02 18:46:31.797 [INFO][3724] ipam_plugin.go 444: Releasing address using workloadID ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" HandleID="k8s-pod-network.3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Workload="localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0" Oct 2 18:46:31.803526 env[1139]: time="2023-10-02T18:46:31Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:46:31.803526 env[1139]: 2023-10-02 18:46:31.802 [INFO][3717] k8s.go 589: Teardown processing complete. ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Oct 2 18:46:31.803986 env[1139]: time="2023-10-02T18:46:31.803567375Z" level=info msg="TearDown network for sandbox \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\" successfully" Oct 2 18:46:31.803986 env[1139]: time="2023-10-02T18:46:31.803609776Z" level=info msg="StopPodSandbox for \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\" returns successfully" Oct 2 18:46:31.806688 env[1139]: time="2023-10-02T18:46:31.804582199Z" level=info msg="RemovePodSandbox for \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\"" Oct 2 18:46:31.806688 env[1139]: time="2023-10-02T18:46:31.804627120Z" level=info msg="Forcibly stopping sandbox \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\"" Oct 2 18:46:31.884194 env[1139]: 2023-10-02 18:46:31.847 [WARNING][3746] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0", GenerateName:"calico-kube-controllers-69c848ddc6-", Namespace:"calico-system", SelfLink:"", UID:"4651c191-e5a5-43a3-92a0-4e8af059654c", ResourceVersion:"789", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 45, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69c848ddc6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b", Pod:"calico-kube-controllers-69c848ddc6-lmcp7", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali004e0a7e71e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:46:31.884194 env[1139]: 2023-10-02 18:46:31.847 [INFO][3746] k8s.go 576: Cleaning up netns ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Oct 2 18:46:31.884194 env[1139]: 2023-10-02 18:46:31.847 [INFO][3746] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" iface="eth0" netns="" Oct 2 18:46:31.884194 env[1139]: 2023-10-02 18:46:31.847 [INFO][3746] k8s.go 583: Releasing IP address(es) ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Oct 2 18:46:31.884194 env[1139]: 2023-10-02 18:46:31.847 [INFO][3746] utils.go 196: Calico CNI releasing IP address ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Oct 2 18:46:31.884194 env[1139]: 2023-10-02 18:46:31.869 [INFO][3753] ipam_plugin.go 416: Releasing address using handleID ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" HandleID="k8s-pod-network.3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Workload="localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0" Oct 2 18:46:31.884194 env[1139]: time="2023-10-02T18:46:31Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:46:31.884194 env[1139]: time="2023-10-02T18:46:31Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:46:31.884194 env[1139]: 2023-10-02 18:46:31.879 [WARNING][3753] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" HandleID="k8s-pod-network.3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Workload="localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0" Oct 2 18:46:31.884194 env[1139]: 2023-10-02 18:46:31.879 [INFO][3753] ipam_plugin.go 444: Releasing address using workloadID ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" HandleID="k8s-pod-network.3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Workload="localhost-k8s-calico--kube--controllers--69c848ddc6--lmcp7-eth0" Oct 2 18:46:31.884194 env[1139]: time="2023-10-02T18:46:31Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:46:31.884194 env[1139]: 2023-10-02 18:46:31.882 [INFO][3746] k8s.go 589: Teardown processing complete. ContainerID="3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7" Oct 2 18:46:31.884691 env[1139]: time="2023-10-02T18:46:31.884655581Z" level=info msg="TearDown network for sandbox \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\" successfully" Oct 2 18:46:31.889521 env[1139]: time="2023-10-02T18:46:31.889476253Z" level=info msg="RemovePodSandbox \"3a206ce814ddc324d7c51c99fcc660e4e695a0e7897f351f301367e7d276ead7\" returns successfully" Oct 2 18:46:31.890066 env[1139]: time="2023-10-02T18:46:31.890012146Z" level=info msg="StopPodSandbox for \"33cb8c1272cb963b15cddf9f66892f5dc425c4f7c031790ee6802313444a2f99\"" Oct 2 18:46:31.890308 env[1139]: time="2023-10-02T18:46:31.890269792Z" level=info msg="TearDown network for sandbox \"33cb8c1272cb963b15cddf9f66892f5dc425c4f7c031790ee6802313444a2f99\" successfully" Oct 2 18:46:31.890377 env[1139]: time="2023-10-02T18:46:31.890361114Z" level=info msg="StopPodSandbox for \"33cb8c1272cb963b15cddf9f66892f5dc425c4f7c031790ee6802313444a2f99\" returns successfully" Oct 2 18:46:31.890757 env[1139]: time="2023-10-02T18:46:31.890717962Z" level=info msg="RemovePodSandbox for \"33cb8c1272cb963b15cddf9f66892f5dc425c4f7c031790ee6802313444a2f99\"" Oct 2 18:46:31.890829 env[1139]: time="2023-10-02T18:46:31.890752163Z" level=info msg="Forcibly stopping sandbox \"33cb8c1272cb963b15cddf9f66892f5dc425c4f7c031790ee6802313444a2f99\"" Oct 2 18:46:31.890829 env[1139]: time="2023-10-02T18:46:31.890818924Z" level=info msg="TearDown network for sandbox \"33cb8c1272cb963b15cddf9f66892f5dc425c4f7c031790ee6802313444a2f99\" successfully" Oct 2 18:46:31.892995 env[1139]: time="2023-10-02T18:46:31.892954414Z" level=info msg="RemovePodSandbox \"33cb8c1272cb963b15cddf9f66892f5dc425c4f7c031790ee6802313444a2f99\" returns successfully" Oct 2 18:46:31.893504 kubelet[2045]: I1002 18:46:31.893392 2045 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 18:46:31.907069 kubelet[2045]: I1002 18:46:31.907036 2045 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 18:46:31.907203 kubelet[2045]: I1002 18:46:31.907178 2045 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/coredns-787d4945fb-bbgkt calico-system/calico-kube-controllers-69c848ddc6-lmcp7 kube-system/coredns-787d4945fb-c2tbt calico-system/csi-node-driver-gxhfr kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost calico-system/calico-typha-5ccdfc8548-2dvzp calico-system/calico-node-qmpkh kube-system/kube-proxy-klg9c]" Oct 2 18:46:31.907242 kubelet[2045]: E1002 18:46:31.907208 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-787d4945fb-bbgkt" Oct 2 18:46:31.907242 kubelet[2045]: E1002 18:46:31.907222 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-kube-controllers-69c848ddc6-lmcp7" Oct 2 18:46:31.907242 kubelet[2045]: E1002 18:46:31.907233 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-787d4945fb-c2tbt" Oct 2 18:46:31.907242 kubelet[2045]: E1002 18:46:31.907242 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-gxhfr" Oct 2 18:46:31.907350 kubelet[2045]: E1002 18:46:31.907254 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 18:46:31.907350 kubelet[2045]: E1002 18:46:31.907265 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 18:46:31.907350 kubelet[2045]: E1002 18:46:31.907276 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 18:46:31.907350 kubelet[2045]: E1002 18:46:31.907288 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-typha-5ccdfc8548-2dvzp" Oct 2 18:46:31.907350 kubelet[2045]: E1002 18:46:31.907298 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-node-qmpkh" Oct 2 18:46:31.907350 kubelet[2045]: E1002 18:46:31.907308 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-klg9c" Oct 2 18:46:31.907350 kubelet[2045]: I1002 18:46:31.907317 2045 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 18:46:31.988775 kubelet[2045]: I1002 18:46:31.988728 2045 eviction_manager.go:173] "Failed to admit pod to node" pod="tigera-operator/tigera-operator-54b47459dd-mzspz" nodeCondition=[DiskPressure] Oct 2 18:46:32.455032 kubelet[2045]: I1002 18:46:32.454766 2045 eviction_manager.go:173] "Failed to admit pod to node" pod="tigera-operator/tigera-operator-54b47459dd-ch7p2" nodeCondition=[DiskPressure] Oct 2 18:46:32.801244 kubelet[2045]: I1002 18:46:32.801130 2045 eviction_manager.go:173] "Failed to admit pod to node" pod="tigera-operator/tigera-operator-54b47459dd-x29pv" nodeCondition=[DiskPressure] Oct 2 18:46:32.833777 env[1139]: time="2023-10-02T18:46:32.833727313Z" level=info msg="StopPodSandbox for \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\"" Oct 2 18:46:32.907003 systemd-networkd[1040]: cali004e0a7e71e: Gained IPv6LL Oct 2 18:46:32.926942 env[1139]: 2023-10-02 18:46:32.885 [INFO][3783] k8s.go 576: Cleaning up netns ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Oct 2 18:46:32.926942 env[1139]: 2023-10-02 18:46:32.885 [INFO][3783] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" iface="eth0" netns="/var/run/netns/cni-4e2171c7-bf7f-7960-c1b7-cfe78e45a1dc" Oct 2 18:46:32.926942 env[1139]: 2023-10-02 18:46:32.886 [INFO][3783] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" iface="eth0" netns="/var/run/netns/cni-4e2171c7-bf7f-7960-c1b7-cfe78e45a1dc" Oct 2 18:46:32.926942 env[1139]: 2023-10-02 18:46:32.886 [INFO][3783] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" iface="eth0" netns="/var/run/netns/cni-4e2171c7-bf7f-7960-c1b7-cfe78e45a1dc" Oct 2 18:46:32.926942 env[1139]: 2023-10-02 18:46:32.886 [INFO][3783] k8s.go 583: Releasing IP address(es) ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Oct 2 18:46:32.926942 env[1139]: 2023-10-02 18:46:32.886 [INFO][3783] utils.go 196: Calico CNI releasing IP address ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Oct 2 18:46:32.926942 env[1139]: 2023-10-02 18:46:32.909 [INFO][3790] ipam_plugin.go 416: Releasing address using handleID ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" HandleID="k8s-pod-network.925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Workload="localhost-k8s-coredns--787d4945fb--bbgkt-eth0" Oct 2 18:46:32.926942 env[1139]: time="2023-10-02T18:46:32Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:46:32.926942 env[1139]: time="2023-10-02T18:46:32Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:46:32.926942 env[1139]: 2023-10-02 18:46:32.922 [WARNING][3790] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" HandleID="k8s-pod-network.925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Workload="localhost-k8s-coredns--787d4945fb--bbgkt-eth0" Oct 2 18:46:32.926942 env[1139]: 2023-10-02 18:46:32.922 [INFO][3790] ipam_plugin.go 444: Releasing address using workloadID ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" HandleID="k8s-pod-network.925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Workload="localhost-k8s-coredns--787d4945fb--bbgkt-eth0" Oct 2 18:46:32.926942 env[1139]: time="2023-10-02T18:46:32Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:46:32.926942 env[1139]: 2023-10-02 18:46:32.925 [INFO][3783] k8s.go 589: Teardown processing complete. ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Oct 2 18:46:32.928919 systemd[1]: run-netns-cni\x2d4e2171c7\x2dbf7f\x2d7960\x2dc1b7\x2dcfe78e45a1dc.mount: Deactivated successfully. Oct 2 18:46:32.929677 env[1139]: time="2023-10-02T18:46:32.929570969Z" level=info msg="TearDown network for sandbox \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\" successfully" Oct 2 18:46:32.929677 env[1139]: time="2023-10-02T18:46:32.929608810Z" level=info msg="StopPodSandbox for \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\" returns successfully" Oct 2 18:46:32.929958 kubelet[2045]: E1002 18:46:32.929937 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:32.930431 env[1139]: time="2023-10-02T18:46:32.930384988Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-bbgkt,Uid:82f96fa7-627f-4c7d-935f-b21d213344a8,Namespace:kube-system,Attempt:1,}" Oct 2 18:46:33.132734 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 18:46:33.132847 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliad4bae06d9d: link becomes ready Oct 2 18:46:33.145902 systemd-networkd[1040]: caliad4bae06d9d: Link UP Oct 2 18:46:33.145908 systemd-networkd[1040]: caliad4bae06d9d: Gained carrier Oct 2 18:46:33.172272 env[1139]: 2023-10-02 18:46:32.992 [INFO][3797] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--787d4945fb--bbgkt-eth0 coredns-787d4945fb- kube-system 82f96fa7-627f-4c7d-935f-b21d213344a8 835 0 2023-10-02 18:45:51 +0000 UTC map[k8s-app:kube-dns pod-template-hash:787d4945fb projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-787d4945fb-bbgkt eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] caliad4bae06d9d [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a" Namespace="kube-system" Pod="coredns-787d4945fb-bbgkt" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--bbgkt-" Oct 2 18:46:33.172272 env[1139]: 2023-10-02 18:46:32.992 [INFO][3797] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a" Namespace="kube-system" Pod="coredns-787d4945fb-bbgkt" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--bbgkt-eth0" Oct 2 18:46:33.172272 env[1139]: 2023-10-02 18:46:33.036 [INFO][3810] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a" HandleID="k8s-pod-network.6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a" Workload="localhost-k8s-coredns--787d4945fb--bbgkt-eth0" Oct 2 18:46:33.172272 env[1139]: 2023-10-02 18:46:33.049 [INFO][3810] ipam_plugin.go 269: Auto assigning IP ContainerID="6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a" HandleID="k8s-pod-network.6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a" Workload="localhost-k8s-coredns--787d4945fb--bbgkt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400019c790), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-787d4945fb-bbgkt", "timestamp":"2023-10-02 18:46:33.036583379 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 18:46:33.172272 env[1139]: time="2023-10-02T18:46:33Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:46:33.172272 env[1139]: time="2023-10-02T18:46:33Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:46:33.172272 env[1139]: 2023-10-02 18:46:33.050 [INFO][3810] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 2 18:46:33.172272 env[1139]: 2023-10-02 18:46:33.053 [INFO][3810] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a" host="localhost" Oct 2 18:46:33.172272 env[1139]: 2023-10-02 18:46:33.068 [INFO][3810] ipam.go 372: Looking up existing affinities for host host="localhost" Oct 2 18:46:33.172272 env[1139]: 2023-10-02 18:46:33.074 [INFO][3810] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Oct 2 18:46:33.172272 env[1139]: 2023-10-02 18:46:33.076 [INFO][3810] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 2 18:46:33.172272 env[1139]: 2023-10-02 18:46:33.079 [INFO][3810] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 2 18:46:33.172272 env[1139]: 2023-10-02 18:46:33.079 [INFO][3810] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a" host="localhost" Oct 2 18:46:33.172272 env[1139]: 2023-10-02 18:46:33.112 [INFO][3810] ipam.go 1682: Creating new handle: k8s-pod-network.6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a Oct 2 18:46:33.172272 env[1139]: 2023-10-02 18:46:33.121 [INFO][3810] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a" host="localhost" Oct 2 18:46:33.172272 env[1139]: 2023-10-02 18:46:33.128 [INFO][3810] ipam.go 1216: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a" host="localhost" Oct 2 18:46:33.172272 env[1139]: 2023-10-02 18:46:33.128 [INFO][3810] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a" host="localhost" Oct 2 18:46:33.172272 env[1139]: time="2023-10-02T18:46:33Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:46:33.172272 env[1139]: 2023-10-02 18:46:33.128 [INFO][3810] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a" HandleID="k8s-pod-network.6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a" Workload="localhost-k8s-coredns--787d4945fb--bbgkt-eth0" Oct 2 18:46:33.172892 env[1139]: 2023-10-02 18:46:33.130 [INFO][3797] k8s.go 383: Populated endpoint ContainerID="6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a" Namespace="kube-system" Pod="coredns-787d4945fb-bbgkt" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--bbgkt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--787d4945fb--bbgkt-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"82f96fa7-627f-4c7d-935f-b21d213344a8", ResourceVersion:"835", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 45, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-787d4945fb-bbgkt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliad4bae06d9d", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:46:33.172892 env[1139]: 2023-10-02 18:46:33.130 [INFO][3797] k8s.go 384: Calico CNI using IPs: [192.168.88.130/32] ContainerID="6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a" Namespace="kube-system" Pod="coredns-787d4945fb-bbgkt" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--bbgkt-eth0" Oct 2 18:46:33.172892 env[1139]: 2023-10-02 18:46:33.130 [INFO][3797] dataplane_linux.go 68: Setting the host side veth name to caliad4bae06d9d ContainerID="6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a" Namespace="kube-system" Pod="coredns-787d4945fb-bbgkt" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--bbgkt-eth0" Oct 2 18:46:33.172892 env[1139]: 2023-10-02 18:46:33.132 [INFO][3797] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a" Namespace="kube-system" Pod="coredns-787d4945fb-bbgkt" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--bbgkt-eth0" Oct 2 18:46:33.172892 env[1139]: 2023-10-02 18:46:33.150 [INFO][3797] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a" Namespace="kube-system" Pod="coredns-787d4945fb-bbgkt" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--bbgkt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--787d4945fb--bbgkt-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"82f96fa7-627f-4c7d-935f-b21d213344a8", ResourceVersion:"835", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 45, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a", Pod:"coredns-787d4945fb-bbgkt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliad4bae06d9d", MAC:"72:82:90:04:1a:74", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:46:33.172892 env[1139]: 2023-10-02 18:46:33.166 [INFO][3797] k8s.go 489: Wrote updated endpoint to datastore ContainerID="6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a" Namespace="kube-system" Pod="coredns-787d4945fb-bbgkt" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--bbgkt-eth0" Oct 2 18:46:33.178000 audit[3829]: NETFILTER_CFG table=filter:116 family=2 entries=40 op=nft_register_chain pid=3829 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:46:33.178000 audit[3829]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21096 a0=3 a1=ffffc6bf95a0 a2=0 a3=ffff88f6afa0 items=0 ppid=3289 pid=3829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:33.178000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:46:33.201503 env[1139]: time="2023-10-02T18:46:33.195155295Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:46:33.201503 env[1139]: time="2023-10-02T18:46:33.195370419Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:46:33.201503 env[1139]: time="2023-10-02T18:46:33.195382300Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:46:33.201503 env[1139]: time="2023-10-02T18:46:33.197765673Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a pid=3844 runtime=io.containerd.runc.v2 Oct 2 18:46:33.201815 kubelet[2045]: I1002 18:46:33.197313 2045 eviction_manager.go:173] "Failed to admit pod to node" pod="tigera-operator/tigera-operator-54b47459dd-nlkl8" nodeCondition=[DiskPressure] Oct 2 18:46:33.215326 systemd[1]: Started cri-containerd-6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a.scope. Oct 2 18:46:33.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.249000 audit: BPF prog-id=149 op=LOAD Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3844 pid=3853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:33.250000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636333964623034383562343030373832653566363636336263623563 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3844 pid=3853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:33.250000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636333964623034383562343030373832653566363636336263623563 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit: BPF prog-id=150 op=LOAD Oct 2 18:46:33.250000 audit[3853]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3844 pid=3853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:33.250000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636333964623034383562343030373832653566363636336263623563 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit: BPF prog-id=151 op=LOAD Oct 2 18:46:33.250000 audit[3853]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3844 pid=3853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:33.250000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636333964623034383562343030373832653566363636336263623563 Oct 2 18:46:33.250000 audit: BPF prog-id=151 op=UNLOAD Oct 2 18:46:33.250000 audit: BPF prog-id=150 op=UNLOAD Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.250000 audit: BPF prog-id=152 op=LOAD Oct 2 18:46:33.250000 audit[3853]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3844 pid=3853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:33.250000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636333964623034383562343030373832653566363636336263623563 Oct 2 18:46:33.251412 systemd-resolved[1085]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 18:46:33.271104 env[1139]: time="2023-10-02T18:46:33.271058857Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-bbgkt,Uid:82f96fa7-627f-4c7d-935f-b21d213344a8,Namespace:kube-system,Attempt:1,} returns sandbox id \"6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a\"" Oct 2 18:46:33.271930 kubelet[2045]: E1002 18:46:33.271906 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:33.596164 kubelet[2045]: I1002 18:46:33.595558 2045 eviction_manager.go:173] "Failed to admit pod to node" pod="tigera-operator/tigera-operator-54b47459dd-g548q" nodeCondition=[DiskPressure] Oct 2 18:46:33.654073 env[1139]: time="2023-10-02T18:46:33.654016867Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:33.656085 env[1139]: time="2023-10-02T18:46:33.656020031Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2a83e28de36778d89892266990cc390b1519b82e6d9724ca705c0d1e700b5804,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:33.659162 env[1139]: time="2023-10-02T18:46:33.659116700Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:33.659785 env[1139]: time="2023-10-02T18:46:33.659753114Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\" returns image reference \"sha256:2a83e28de36778d89892266990cc390b1519b82e6d9724ca705c0d1e700b5804\"" Oct 2 18:46:33.660433 env[1139]: time="2023-10-02T18:46:33.660406249Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 18:46:33.661594 env[1139]: time="2023-10-02T18:46:33.661386870Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:b764feb1777655aabce5988324b69b412d23e087436ee2414dff893a158fcdef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:33.663723 env[1139]: time="2023-10-02T18:46:33.663685521Z" level=info msg="CreateContainer within sandbox \"af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Oct 2 18:46:33.773089 env[1139]: time="2023-10-02T18:46:33.773012745Z" level=info msg="CreateContainer within sandbox \"af2a1c65f3c9e3b4b0a67f756a66b6a468286759ab8110dd8a61f772f6bf6e6b\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"6ec5f1248b8ff209dcc77a42852a5dd3cf50cddafed0be6088571c9a21f2079d\"" Oct 2 18:46:33.773570 env[1139]: time="2023-10-02T18:46:33.773534196Z" level=info msg="StartContainer for \"6ec5f1248b8ff209dcc77a42852a5dd3cf50cddafed0be6088571c9a21f2079d\"" Oct 2 18:46:33.792504 systemd[1]: Started cri-containerd-6ec5f1248b8ff209dcc77a42852a5dd3cf50cddafed0be6088571c9a21f2079d.scope. Oct 2 18:46:33.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.822000 audit: BPF prog-id=153 op=LOAD Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { bpf } for pid=3885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3669 pid=3885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:33.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665633566313234386238666632303964636337376134323835326135 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { perfmon } for pid=3885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3669 pid=3885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:33.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665633566313234386238666632303964636337376134323835326135 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { bpf } for pid=3885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { bpf } for pid=3885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { bpf } for pid=3885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { perfmon } for pid=3885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { perfmon } for pid=3885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { perfmon } for pid=3885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { perfmon } for pid=3885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { perfmon } for pid=3885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { bpf } for pid=3885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { bpf } for pid=3885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit: BPF prog-id=154 op=LOAD Oct 2 18:46:33.823000 audit[3885]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3669 pid=3885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:33.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665633566313234386238666632303964636337376134323835326135 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { bpf } for pid=3885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { bpf } for pid=3885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { perfmon } for pid=3885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { perfmon } for pid=3885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { perfmon } for pid=3885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { perfmon } for pid=3885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { perfmon } for pid=3885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { bpf } for pid=3885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { bpf } for pid=3885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit: BPF prog-id=155 op=LOAD Oct 2 18:46:33.823000 audit[3885]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3669 pid=3885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:33.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665633566313234386238666632303964636337376134323835326135 Oct 2 18:46:33.823000 audit: BPF prog-id=155 op=UNLOAD Oct 2 18:46:33.823000 audit: BPF prog-id=154 op=UNLOAD Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { bpf } for pid=3885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { bpf } for pid=3885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { bpf } for pid=3885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { perfmon } for pid=3885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { perfmon } for pid=3885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { perfmon } for pid=3885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { perfmon } for pid=3885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { perfmon } for pid=3885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { bpf } for pid=3885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit[3885]: AVC avc: denied { bpf } for pid=3885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:33.823000 audit: BPF prog-id=156 op=LOAD Oct 2 18:46:33.823000 audit[3885]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3669 pid=3885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:33.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665633566313234386238666632303964636337376134323835326135 Oct 2 18:46:33.838955 env[1139]: time="2023-10-02T18:46:33.836783238Z" level=info msg="StopPodSandbox for \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\"" Oct 2 18:46:33.838955 env[1139]: time="2023-10-02T18:46:33.838853404Z" level=info msg="StopPodSandbox for \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\"" Oct 2 18:46:33.881921 env[1139]: time="2023-10-02T18:46:33.881636553Z" level=info msg="StartContainer for \"6ec5f1248b8ff209dcc77a42852a5dd3cf50cddafed0be6088571c9a21f2079d\" returns successfully" Oct 2 18:46:34.003843 kubelet[2045]: I1002 18:46:33.997508 2045 eviction_manager.go:173] "Failed to admit pod to node" pod="tigera-operator/tigera-operator-54b47459dd-x7h4z" nodeCondition=[DiskPressure] Oct 2 18:46:34.067215 env[1139]: 2023-10-02 18:46:33.895 [INFO][3931] k8s.go 576: Cleaning up netns ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Oct 2 18:46:34.067215 env[1139]: 2023-10-02 18:46:33.895 [INFO][3931] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" iface="eth0" netns="/var/run/netns/cni-c57a408f-0562-fff3-7c5b-0ee5f091a549" Oct 2 18:46:34.067215 env[1139]: 2023-10-02 18:46:33.896 [INFO][3931] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" iface="eth0" netns="/var/run/netns/cni-c57a408f-0562-fff3-7c5b-0ee5f091a549" Oct 2 18:46:34.067215 env[1139]: 2023-10-02 18:46:33.897 [INFO][3931] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" iface="eth0" netns="/var/run/netns/cni-c57a408f-0562-fff3-7c5b-0ee5f091a549" Oct 2 18:46:34.067215 env[1139]: 2023-10-02 18:46:33.897 [INFO][3931] k8s.go 583: Releasing IP address(es) ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Oct 2 18:46:34.067215 env[1139]: 2023-10-02 18:46:33.898 [INFO][3931] utils.go 196: Calico CNI releasing IP address ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Oct 2 18:46:34.067215 env[1139]: 2023-10-02 18:46:34.041 [INFO][3957] ipam_plugin.go 416: Releasing address using handleID ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" HandleID="k8s-pod-network.ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Workload="localhost-k8s-csi--node--driver--gxhfr-eth0" Oct 2 18:46:34.067215 env[1139]: time="2023-10-02T18:46:34Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:46:34.067215 env[1139]: time="2023-10-02T18:46:34Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:46:34.067215 env[1139]: 2023-10-02 18:46:34.058 [WARNING][3957] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" HandleID="k8s-pod-network.ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Workload="localhost-k8s-csi--node--driver--gxhfr-eth0" Oct 2 18:46:34.067215 env[1139]: 2023-10-02 18:46:34.058 [INFO][3957] ipam_plugin.go 444: Releasing address using workloadID ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" HandleID="k8s-pod-network.ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Workload="localhost-k8s-csi--node--driver--gxhfr-eth0" Oct 2 18:46:34.067215 env[1139]: time="2023-10-02T18:46:34Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:46:34.067215 env[1139]: 2023-10-02 18:46:34.062 [INFO][3931] k8s.go 589: Teardown processing complete. ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Oct 2 18:46:34.069524 systemd[1]: run-netns-cni\x2dc57a408f\x2d0562\x2dfff3\x2d7c5b\x2d0ee5f091a549.mount: Deactivated successfully. Oct 2 18:46:34.070605 env[1139]: time="2023-10-02T18:46:34.069574603Z" level=info msg="TearDown network for sandbox \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\" successfully" Oct 2 18:46:34.070605 env[1139]: time="2023-10-02T18:46:34.069622364Z" level=info msg="StopPodSandbox for \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\" returns successfully" Oct 2 18:46:34.070605 env[1139]: time="2023-10-02T18:46:34.070403381Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-gxhfr,Uid:0ac531b4-60de-4c30-9e55-9511dd464d1f,Namespace:calico-system,Attempt:1,}" Oct 2 18:46:34.103744 env[1139]: 2023-10-02 18:46:33.940 [INFO][3948] k8s.go 576: Cleaning up netns ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Oct 2 18:46:34.103744 env[1139]: 2023-10-02 18:46:33.940 [INFO][3948] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" iface="eth0" netns="/var/run/netns/cni-397f8dbc-b3cb-165a-f332-74e40d242b4f" Oct 2 18:46:34.103744 env[1139]: 2023-10-02 18:46:33.941 [INFO][3948] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" iface="eth0" netns="/var/run/netns/cni-397f8dbc-b3cb-165a-f332-74e40d242b4f" Oct 2 18:46:34.103744 env[1139]: 2023-10-02 18:46:33.941 [INFO][3948] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" iface="eth0" netns="/var/run/netns/cni-397f8dbc-b3cb-165a-f332-74e40d242b4f" Oct 2 18:46:34.103744 env[1139]: 2023-10-02 18:46:33.941 [INFO][3948] k8s.go 583: Releasing IP address(es) ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Oct 2 18:46:34.103744 env[1139]: 2023-10-02 18:46:33.941 [INFO][3948] utils.go 196: Calico CNI releasing IP address ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Oct 2 18:46:34.103744 env[1139]: 2023-10-02 18:46:34.080 [INFO][3965] ipam_plugin.go 416: Releasing address using handleID ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" HandleID="k8s-pod-network.6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Workload="localhost-k8s-coredns--787d4945fb--c2tbt-eth0" Oct 2 18:46:34.103744 env[1139]: time="2023-10-02T18:46:34Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:46:34.103744 env[1139]: time="2023-10-02T18:46:34Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:46:34.103744 env[1139]: 2023-10-02 18:46:34.092 [WARNING][3965] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" HandleID="k8s-pod-network.6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Workload="localhost-k8s-coredns--787d4945fb--c2tbt-eth0" Oct 2 18:46:34.103744 env[1139]: 2023-10-02 18:46:34.092 [INFO][3965] ipam_plugin.go 444: Releasing address using workloadID ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" HandleID="k8s-pod-network.6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Workload="localhost-k8s-coredns--787d4945fb--c2tbt-eth0" Oct 2 18:46:34.103744 env[1139]: time="2023-10-02T18:46:34Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:46:34.103744 env[1139]: 2023-10-02 18:46:34.102 [INFO][3948] k8s.go 589: Teardown processing complete. ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Oct 2 18:46:34.104227 env[1139]: time="2023-10-02T18:46:34.103918907Z" level=info msg="TearDown network for sandbox \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\" successfully" Oct 2 18:46:34.104227 env[1139]: time="2023-10-02T18:46:34.103952547Z" level=info msg="StopPodSandbox for \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\" returns successfully" Oct 2 18:46:34.104304 kubelet[2045]: E1002 18:46:34.104276 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:34.104969 env[1139]: time="2023-10-02T18:46:34.104933489Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-c2tbt,Uid:dfc00849-f8bc-438a-a6e0-f12214fdbed2,Namespace:kube-system,Attempt:1,}" Oct 2 18:46:34.193000 audit[1915]: AVC avc: denied { watch } for pid=1915 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7052 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:46:34.193000 audit[1915]: AVC avc: denied { watch } for pid=1915 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:46:34.193000 audit[1915]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4001da1260 a2=fc6 a3=0 items=0 ppid=1751 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 key=(null) Oct 2 18:46:34.193000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:46:34.193000 audit[1915]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002d56960 a2=fc6 a3=0 items=0 ppid=1751 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 key=(null) Oct 2 18:46:34.193000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:46:34.223920 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 18:46:34.224048 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8bcba260e81: link becomes ready Oct 2 18:46:34.233801 systemd-networkd[1040]: cali8bcba260e81: Link UP Oct 2 18:46:34.233815 systemd-networkd[1040]: cali8bcba260e81: Gained carrier Oct 2 18:46:34.247654 env[1139]: 2023-10-02 18:46:34.138 [INFO][3998] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--gxhfr-eth0 csi-node-driver- calico-system 0ac531b4-60de-4c30-9e55-9511dd464d1f 868 0 2023-10-02 18:46:06 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:5877dcb8f5 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s localhost csi-node-driver-gxhfr eth0 default [] [] [kns.calico-system ksa.calico-system.default] cali8bcba260e81 [] []}} ContainerID="193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b" Namespace="calico-system" Pod="csi-node-driver-gxhfr" WorkloadEndpoint="localhost-k8s-csi--node--driver--gxhfr-" Oct 2 18:46:34.247654 env[1139]: 2023-10-02 18:46:34.138 [INFO][3998] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b" Namespace="calico-system" Pod="csi-node-driver-gxhfr" WorkloadEndpoint="localhost-k8s-csi--node--driver--gxhfr-eth0" Oct 2 18:46:34.247654 env[1139]: 2023-10-02 18:46:34.174 [INFO][4023] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b" HandleID="k8s-pod-network.193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b" Workload="localhost-k8s-csi--node--driver--gxhfr-eth0" Oct 2 18:46:34.247654 env[1139]: 2023-10-02 18:46:34.189 [INFO][4023] ipam_plugin.go 269: Auto assigning IP ContainerID="193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b" HandleID="k8s-pod-network.193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b" Workload="localhost-k8s-csi--node--driver--gxhfr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001bfa70), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-gxhfr", "timestamp":"2023-10-02 18:46:34.174042825 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 18:46:34.247654 env[1139]: time="2023-10-02T18:46:34Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:46:34.247654 env[1139]: time="2023-10-02T18:46:34Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:46:34.247654 env[1139]: 2023-10-02 18:46:34.189 [INFO][4023] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 2 18:46:34.247654 env[1139]: 2023-10-02 18:46:34.191 [INFO][4023] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b" host="localhost" Oct 2 18:46:34.247654 env[1139]: 2023-10-02 18:46:34.195 [INFO][4023] ipam.go 372: Looking up existing affinities for host host="localhost" Oct 2 18:46:34.247654 env[1139]: 2023-10-02 18:46:34.199 [INFO][4023] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Oct 2 18:46:34.247654 env[1139]: 2023-10-02 18:46:34.200 [INFO][4023] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 2 18:46:34.247654 env[1139]: 2023-10-02 18:46:34.207 [INFO][4023] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 2 18:46:34.247654 env[1139]: 2023-10-02 18:46:34.207 [INFO][4023] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b" host="localhost" Oct 2 18:46:34.247654 env[1139]: 2023-10-02 18:46:34.209 [INFO][4023] ipam.go 1682: Creating new handle: k8s-pod-network.193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b Oct 2 18:46:34.247654 env[1139]: 2023-10-02 18:46:34.212 [INFO][4023] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b" host="localhost" Oct 2 18:46:34.247654 env[1139]: 2023-10-02 18:46:34.218 [INFO][4023] ipam.go 1216: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b" host="localhost" Oct 2 18:46:34.247654 env[1139]: 2023-10-02 18:46:34.218 [INFO][4023] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b" host="localhost" Oct 2 18:46:34.247654 env[1139]: time="2023-10-02T18:46:34Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:46:34.247654 env[1139]: 2023-10-02 18:46:34.218 [INFO][4023] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b" HandleID="k8s-pod-network.193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b" Workload="localhost-k8s-csi--node--driver--gxhfr-eth0" Oct 2 18:46:34.248384 env[1139]: 2023-10-02 18:46:34.221 [INFO][3998] k8s.go 383: Populated endpoint ContainerID="193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b" Namespace="calico-system" Pod="csi-node-driver-gxhfr" WorkloadEndpoint="localhost-k8s-csi--node--driver--gxhfr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--gxhfr-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"0ac531b4-60de-4c30-9e55-9511dd464d1f", ResourceVersion:"868", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 46, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"5877dcb8f5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-gxhfr", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali8bcba260e81", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:46:34.248384 env[1139]: 2023-10-02 18:46:34.221 [INFO][3998] k8s.go 384: Calico CNI using IPs: [192.168.88.131/32] ContainerID="193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b" Namespace="calico-system" Pod="csi-node-driver-gxhfr" WorkloadEndpoint="localhost-k8s-csi--node--driver--gxhfr-eth0" Oct 2 18:46:34.248384 env[1139]: 2023-10-02 18:46:34.221 [INFO][3998] dataplane_linux.go 68: Setting the host side veth name to cali8bcba260e81 ContainerID="193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b" Namespace="calico-system" Pod="csi-node-driver-gxhfr" WorkloadEndpoint="localhost-k8s-csi--node--driver--gxhfr-eth0" Oct 2 18:46:34.248384 env[1139]: 2023-10-02 18:46:34.224 [INFO][3998] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b" Namespace="calico-system" Pod="csi-node-driver-gxhfr" WorkloadEndpoint="localhost-k8s-csi--node--driver--gxhfr-eth0" Oct 2 18:46:34.248384 env[1139]: 2023-10-02 18:46:34.233 [INFO][3998] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b" Namespace="calico-system" Pod="csi-node-driver-gxhfr" WorkloadEndpoint="localhost-k8s-csi--node--driver--gxhfr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--gxhfr-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"0ac531b4-60de-4c30-9e55-9511dd464d1f", ResourceVersion:"868", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 46, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"5877dcb8f5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b", Pod:"csi-node-driver-gxhfr", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali8bcba260e81", MAC:"46:a5:3f:11:28:38", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:46:34.248384 env[1139]: 2023-10-02 18:46:34.246 [INFO][3998] k8s.go 489: Wrote updated endpoint to datastore ContainerID="193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b" Namespace="calico-system" Pod="csi-node-driver-gxhfr" WorkloadEndpoint="localhost-k8s-csi--node--driver--gxhfr-eth0" Oct 2 18:46:34.264000 audit[4058]: NETFILTER_CFG table=filter:117 family=2 entries=38 op=nft_register_chain pid=4058 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:46:34.264000 audit[4058]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19508 a0=3 a1=ffffd7fb3800 a2=0 a3=ffffad941fa0 items=0 ppid=3289 pid=4058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:34.264000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:46:34.271474 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliefd09943580: link becomes ready Oct 2 18:46:34.280046 systemd-networkd[1040]: caliefd09943580: Link UP Oct 2 18:46:34.280053 systemd-networkd[1040]: caliefd09943580: Gained carrier Oct 2 18:46:34.289803 env[1139]: time="2023-10-02T18:46:34.289347601Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:46:34.289803 env[1139]: time="2023-10-02T18:46:34.289391722Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:46:34.289803 env[1139]: time="2023-10-02T18:46:34.289402802Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:46:34.289803 env[1139]: time="2023-10-02T18:46:34.289559246Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b pid=4066 runtime=io.containerd.runc.v2 Oct 2 18:46:34.294770 env[1139]: 2023-10-02 18:46:34.163 [INFO][4009] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--787d4945fb--c2tbt-eth0 coredns-787d4945fb- kube-system dfc00849-f8bc-438a-a6e0-f12214fdbed2 869 0 2023-10-02 18:45:51 +0000 UTC map[k8s-app:kube-dns pod-template-hash:787d4945fb projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-787d4945fb-c2tbt eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] caliefd09943580 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819" Namespace="kube-system" Pod="coredns-787d4945fb-c2tbt" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--c2tbt-" Oct 2 18:46:34.294770 env[1139]: 2023-10-02 18:46:34.163 [INFO][4009] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819" Namespace="kube-system" Pod="coredns-787d4945fb-c2tbt" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--c2tbt-eth0" Oct 2 18:46:34.294770 env[1139]: 2023-10-02 18:46:34.201 [INFO][4032] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819" HandleID="k8s-pod-network.14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819" Workload="localhost-k8s-coredns--787d4945fb--c2tbt-eth0" Oct 2 18:46:34.294770 env[1139]: 2023-10-02 18:46:34.216 [INFO][4032] ipam_plugin.go 269: Auto assigning IP ContainerID="14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819" HandleID="k8s-pod-network.14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819" Workload="localhost-k8s-coredns--787d4945fb--c2tbt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40004f3570), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-787d4945fb-c2tbt", "timestamp":"2023-10-02 18:46:34.200944087 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 18:46:34.294770 env[1139]: time="2023-10-02T18:46:34Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:46:34.294770 env[1139]: time="2023-10-02T18:46:34Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:46:34.294770 env[1139]: 2023-10-02 18:46:34.219 [INFO][4032] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 2 18:46:34.294770 env[1139]: 2023-10-02 18:46:34.221 [INFO][4032] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819" host="localhost" Oct 2 18:46:34.294770 env[1139]: 2023-10-02 18:46:34.226 [INFO][4032] ipam.go 372: Looking up existing affinities for host host="localhost" Oct 2 18:46:34.294770 env[1139]: 2023-10-02 18:46:34.230 [INFO][4032] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Oct 2 18:46:34.294770 env[1139]: 2023-10-02 18:46:34.234 [INFO][4032] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 2 18:46:34.294770 env[1139]: 2023-10-02 18:46:34.246 [INFO][4032] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 2 18:46:34.294770 env[1139]: 2023-10-02 18:46:34.247 [INFO][4032] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819" host="localhost" Oct 2 18:46:34.294770 env[1139]: 2023-10-02 18:46:34.250 [INFO][4032] ipam.go 1682: Creating new handle: k8s-pod-network.14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819 Oct 2 18:46:34.294770 env[1139]: 2023-10-02 18:46:34.254 [INFO][4032] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819" host="localhost" Oct 2 18:46:34.294770 env[1139]: 2023-10-02 18:46:34.265 [INFO][4032] ipam.go 1216: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819" host="localhost" Oct 2 18:46:34.294770 env[1139]: 2023-10-02 18:46:34.265 [INFO][4032] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819" host="localhost" Oct 2 18:46:34.294770 env[1139]: time="2023-10-02T18:46:34Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:46:34.294770 env[1139]: 2023-10-02 18:46:34.265 [INFO][4032] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819" HandleID="k8s-pod-network.14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819" Workload="localhost-k8s-coredns--787d4945fb--c2tbt-eth0" Oct 2 18:46:34.295494 env[1139]: 2023-10-02 18:46:34.267 [INFO][4009] k8s.go 383: Populated endpoint ContainerID="14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819" Namespace="kube-system" Pod="coredns-787d4945fb-c2tbt" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--c2tbt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--787d4945fb--c2tbt-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"dfc00849-f8bc-438a-a6e0-f12214fdbed2", ResourceVersion:"869", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 45, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-787d4945fb-c2tbt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliefd09943580", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:46:34.295494 env[1139]: 2023-10-02 18:46:34.267 [INFO][4009] k8s.go 384: Calico CNI using IPs: [192.168.88.132/32] ContainerID="14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819" Namespace="kube-system" Pod="coredns-787d4945fb-c2tbt" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--c2tbt-eth0" Oct 2 18:46:34.295494 env[1139]: 2023-10-02 18:46:34.267 [INFO][4009] dataplane_linux.go 68: Setting the host side veth name to caliefd09943580 ContainerID="14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819" Namespace="kube-system" Pod="coredns-787d4945fb-c2tbt" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--c2tbt-eth0" Oct 2 18:46:34.295494 env[1139]: 2023-10-02 18:46:34.271 [INFO][4009] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819" Namespace="kube-system" Pod="coredns-787d4945fb-c2tbt" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--c2tbt-eth0" Oct 2 18:46:34.295494 env[1139]: 2023-10-02 18:46:34.280 [INFO][4009] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819" Namespace="kube-system" Pod="coredns-787d4945fb-c2tbt" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--c2tbt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--787d4945fb--c2tbt-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"dfc00849-f8bc-438a-a6e0-f12214fdbed2", ResourceVersion:"869", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 45, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819", Pod:"coredns-787d4945fb-c2tbt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliefd09943580", MAC:"1e:96:7a:09:4f:47", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:46:34.295494 env[1139]: 2023-10-02 18:46:34.289 [INFO][4009] k8s.go 489: Wrote updated endpoint to datastore ContainerID="14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819" Namespace="kube-system" Pod="coredns-787d4945fb-c2tbt" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--c2tbt-eth0" Oct 2 18:46:34.306000 audit[4095]: NETFILTER_CFG table=filter:118 family=2 entries=38 op=nft_register_chain pid=4095 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:46:34.306000 audit[4095]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19088 a0=3 a1=fffffdfd2910 a2=0 a3=ffff92b90fa0 items=0 ppid=3289 pid=4095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:34.306000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:46:34.310969 systemd[1]: Started cri-containerd-193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b.scope. Oct 2 18:46:34.320256 env[1139]: time="2023-10-02T18:46:34.320168788Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:46:34.320256 env[1139]: time="2023-10-02T18:46:34.320212349Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:46:34.320256 env[1139]: time="2023-10-02T18:46:34.320223470Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:46:34.320715 env[1139]: time="2023-10-02T18:46:34.320677279Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819 pid=4109 runtime=io.containerd.runc.v2 Oct 2 18:46:34.335213 systemd[1]: Started cri-containerd-14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819.scope. Oct 2 18:46:34.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.343000 audit: BPF prog-id=157 op=LOAD Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { bpf } for pid=4078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4066 pid=4078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:34.344000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139336538353063323234376466633533623562313065343837653465 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { perfmon } for pid=4078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4066 pid=4078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:34.344000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139336538353063323234376466633533623562313065343837653465 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { bpf } for pid=4078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { bpf } for pid=4078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { bpf } for pid=4078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { perfmon } for pid=4078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { perfmon } for pid=4078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { perfmon } for pid=4078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { perfmon } for pid=4078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { perfmon } for pid=4078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { bpf } for pid=4078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { bpf } for pid=4078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit: BPF prog-id=158 op=LOAD Oct 2 18:46:34.344000 audit[4078]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4066 pid=4078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:34.344000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139336538353063323234376466633533623562313065343837653465 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { bpf } for pid=4078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { bpf } for pid=4078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { perfmon } for pid=4078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { perfmon } for pid=4078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { perfmon } for pid=4078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { perfmon } for pid=4078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { perfmon } for pid=4078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { bpf } for pid=4078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { bpf } for pid=4078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit: BPF prog-id=159 op=LOAD Oct 2 18:46:34.344000 audit[4078]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4066 pid=4078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:34.344000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139336538353063323234376466633533623562313065343837653465 Oct 2 18:46:34.344000 audit: BPF prog-id=159 op=UNLOAD Oct 2 18:46:34.344000 audit: BPF prog-id=158 op=UNLOAD Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { bpf } for pid=4078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { bpf } for pid=4078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { bpf } for pid=4078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { perfmon } for pid=4078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { perfmon } for pid=4078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { perfmon } for pid=4078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { perfmon } for pid=4078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { perfmon } for pid=4078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { bpf } for pid=4078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit[4078]: AVC avc: denied { bpf } for pid=4078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.344000 audit: BPF prog-id=160 op=LOAD Oct 2 18:46:34.344000 audit[4078]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4066 pid=4078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:34.344000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139336538353063323234376466633533623562313065343837653465 Oct 2 18:46:34.346530 systemd-resolved[1085]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 18:46:34.365139 env[1139]: time="2023-10-02T18:46:34.365058400Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-gxhfr,Uid:0ac531b4-60de-4c30-9e55-9511dd464d1f,Namespace:calico-system,Attempt:1,} returns sandbox id \"193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b\"" Oct 2 18:46:34.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.368000 audit: BPF prog-id=161 op=LOAD Oct 2 18:46:34.369000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.369000 audit[4126]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4109 pid=4126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:34.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134646464303231643962633033643234366239326430633039333239 Oct 2 18:46:34.369000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.369000 audit[4126]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4109 pid=4126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:34.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134646464303231643962633033643234366239326430633039333239 Oct 2 18:46:34.369000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.369000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.369000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.369000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.369000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.369000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.369000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.369000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.369000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.369000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.369000 audit: BPF prog-id=162 op=LOAD Oct 2 18:46:34.369000 audit[4126]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4109 pid=4126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:34.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134646464303231643962633033643234366239326430633039333239 Oct 2 18:46:34.370000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.370000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.370000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.370000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.370000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.370000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.370000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.370000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.370000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.370000 audit: BPF prog-id=163 op=LOAD Oct 2 18:46:34.370000 audit[4126]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4109 pid=4126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:34.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134646464303231643962633033643234366239326430633039333239 Oct 2 18:46:34.371000 audit: BPF prog-id=163 op=UNLOAD Oct 2 18:46:34.371000 audit: BPF prog-id=162 op=UNLOAD Oct 2 18:46:34.371000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.371000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.371000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.371000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.371000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.371000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.371000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.371000 audit[4126]: AVC avc: denied { perfmon } for pid=4126 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.371000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.371000 audit[4126]: AVC avc: denied { bpf } for pid=4126 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:34.371000 audit: BPF prog-id=164 op=LOAD Oct 2 18:46:34.371000 audit[4126]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4109 pid=4126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:34.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134646464303231643962633033643234366239326430633039333239 Oct 2 18:46:34.372887 systemd-resolved[1085]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 18:46:34.381687 kubelet[2045]: I1002 18:46:34.381598 2045 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-69c848ddc6-lmcp7" podStartSLOduration=-9.223371999473217e+09 pod.CreationTimestamp="2023-10-02 18:45:57 +0000 UTC" firstStartedPulling="2023-10-02 18:46:31.624194683 +0000 UTC m=+51.916317212" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:46:34.380947144 +0000 UTC m=+54.673069673" watchObservedRunningTime="2023-10-02 18:46:34.381558517 +0000 UTC m=+54.673681046" Oct 2 18:46:34.395426 env[1139]: time="2023-10-02T18:46:34.395376817Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-c2tbt,Uid:dfc00849-f8bc-438a-a6e0-f12214fdbed2,Namespace:kube-system,Attempt:1,} returns sandbox id \"14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819\"" Oct 2 18:46:34.396263 kubelet[2045]: E1002 18:46:34.396083 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:34.441592 systemd-networkd[1040]: caliad4bae06d9d: Gained IPv6LL Oct 2 18:46:34.705000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7054 scontext=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:46:34.705000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7052 scontext=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:46:34.705000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=70 a1=40024b2ac0 a2=fc6 a3=0 items=0 ppid=1752 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 key=(null) Oct 2 18:46:34.705000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=61 a1=40072abc80 a2=fc6 a3=0 items=0 ppid=1752 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 key=(null) Oct 2 18:46:34.705000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 18:46:34.705000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 18:46:34.705000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:46:34.705000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=61 a1=40089548a0 a2=fc6 a3=0 items=0 ppid=1752 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 key=(null) Oct 2 18:46:34.705000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 18:46:34.707000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7052 scontext=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:46:34.707000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=61 a1=4002593780 a2=fc6 a3=0 items=0 ppid=1752 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 key=(null) Oct 2 18:46:34.707000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 18:46:34.709000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:46:34.709000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=61 a1=40098ad050 a2=fc6 a3=0 items=0 ppid=1752 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 key=(null) Oct 2 18:46:34.709000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 18:46:34.727000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7060 scontext=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:46:34.727000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=61 a1=4008954930 a2=fc6 a3=0 items=0 ppid=1752 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c121,c952 key=(null) Oct 2 18:46:34.727000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 18:46:34.790282 kubelet[2045]: I1002 18:46:34.790014 2045 eviction_manager.go:173] "Failed to admit pod to node" pod="tigera-operator/tigera-operator-54b47459dd-9llpw" nodeCondition=[DiskPressure] Oct 2 18:46:34.838281 systemd[1]: run-netns-cni\x2d397f8dbc\x2db3cb\x2d165a\x2df332\x2d74e40d242b4f.mount: Deactivated successfully. Oct 2 18:46:35.033924 env[1139]: time="2023-10-02T18:46:35.033787541Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:35.035820 env[1139]: time="2023-10-02T18:46:35.035776103Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:35.037663 env[1139]: time="2023-10-02T18:46:35.037624342Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:35.039105 env[1139]: time="2023-10-02T18:46:35.039064252Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:35.039713 env[1139]: time="2023-10-02T18:46:35.039683986Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\"" Oct 2 18:46:35.040499 env[1139]: time="2023-10-02T18:46:35.040469802Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 18:46:35.043865 env[1139]: time="2023-10-02T18:46:35.043832353Z" level=info msg="CreateContainer within sandbox \"6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 2 18:46:35.053341 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3899402718.mount: Deactivated successfully. Oct 2 18:46:35.053806 env[1139]: time="2023-10-02T18:46:35.053767403Z" level=info msg="CreateContainer within sandbox \"6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"c37a1903a785d364f5fbd97164f6fe3149ad41f52a9c8a9944189931624258e4\"" Oct 2 18:46:35.054304 env[1139]: time="2023-10-02T18:46:35.054272814Z" level=info msg="StartContainer for \"c37a1903a785d364f5fbd97164f6fe3149ad41f52a9c8a9944189931624258e4\"" Oct 2 18:46:35.074679 systemd[1]: Started cri-containerd-c37a1903a785d364f5fbd97164f6fe3149ad41f52a9c8a9944189931624258e4.scope. Oct 2 18:46:35.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.100000 audit: BPF prog-id=165 op=LOAD Oct 2 18:46:35.100000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.100000 audit[4163]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3844 pid=4163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:35.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333376131393033613738356433363466356662643937313634663666 Oct 2 18:46:35.100000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.100000 audit[4163]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3844 pid=4163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:35.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333376131393033613738356433363466356662643937313634663666 Oct 2 18:46:35.100000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.100000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.100000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.100000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.100000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.100000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.100000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.100000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.100000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.100000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.100000 audit: BPF prog-id=166 op=LOAD Oct 2 18:46:35.100000 audit[4163]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3844 pid=4163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:35.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333376131393033613738356433363466356662643937313634663666 Oct 2 18:46:35.101000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.101000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.101000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.101000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.101000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.101000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.101000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.101000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.101000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.101000 audit: BPF prog-id=167 op=LOAD Oct 2 18:46:35.101000 audit[4163]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3844 pid=4163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:35.101000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333376131393033613738356433363466356662643937313634663666 Oct 2 18:46:35.101000 audit: BPF prog-id=167 op=UNLOAD Oct 2 18:46:35.101000 audit: BPF prog-id=166 op=UNLOAD Oct 2 18:46:35.101000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.101000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.101000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.101000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.101000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.101000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.101000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.101000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.101000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.101000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.101000 audit: BPF prog-id=168 op=LOAD Oct 2 18:46:35.101000 audit[4163]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3844 pid=4163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:35.101000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333376131393033613738356433363466356662643937313634663666 Oct 2 18:46:35.119105 env[1139]: time="2023-10-02T18:46:35.119052504Z" level=info msg="StartContainer for \"c37a1903a785d364f5fbd97164f6fe3149ad41f52a9c8a9944189931624258e4\" returns successfully" Oct 2 18:46:35.185204 env[1139]: time="2023-10-02T18:46:35.185133261Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 18:46:35.187460 env[1139]: time="2023-10-02T18:46:35.187379549Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 18:46:35.187718 kubelet[2045]: E1002 18:46:35.187690 2045 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 18:46:35.188018 kubelet[2045]: E1002 18:46:35.187732 2045 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 18:46:35.188018 kubelet[2045]: E1002 18:46:35.188009 2045 kuberuntime_manager.go:872] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-trt9t,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-gxhfr_calico-system(0ac531b4-60de-4c30-9e55-9511dd464d1f): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 18:46:35.188230 env[1139]: time="2023-10-02T18:46:35.188167845Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 18:46:35.248013 env[1139]: time="2023-10-02T18:46:35.247963790Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:35.249107 env[1139]: time="2023-10-02T18:46:35.249065013Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:35.250512 env[1139]: time="2023-10-02T18:46:35.250478643Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:35.251838 env[1139]: time="2023-10-02T18:46:35.251800551Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:46:35.252377 env[1139]: time="2023-10-02T18:46:35.252327562Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\"" Oct 2 18:46:35.253339 env[1139]: time="2023-10-02T18:46:35.253302103Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 18:46:35.254371 env[1139]: time="2023-10-02T18:46:35.254190922Z" level=info msg="CreateContainer within sandbox \"14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 2 18:46:35.264266 env[1139]: time="2023-10-02T18:46:35.264220414Z" level=info msg="CreateContainer within sandbox \"14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"69324d453d2c24239a76fb4fedf39a9e068e9ff9180ea57e2350cb01a2647ab5\"" Oct 2 18:46:35.264698 env[1139]: time="2023-10-02T18:46:35.264655143Z" level=info msg="StartContainer for \"69324d453d2c24239a76fb4fedf39a9e068e9ff9180ea57e2350cb01a2647ab5\"" Oct 2 18:46:35.280431 systemd[1]: Started cri-containerd-69324d453d2c24239a76fb4fedf39a9e068e9ff9180ea57e2350cb01a2647ab5.scope. Oct 2 18:46:35.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.308000 audit: BPF prog-id=169 op=LOAD Oct 2 18:46:35.310000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.310000 audit[4202]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=4109 pid=4202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:35.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639333234643435336432633234323339613736666234666564663339 Oct 2 18:46:35.310000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.310000 audit[4202]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=4109 pid=4202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:35.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639333234643435336432633234323339613736666234666564663339 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit: BPF prog-id=170 op=LOAD Oct 2 18:46:35.311000 audit[4202]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=4109 pid=4202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:35.311000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639333234643435336432633234323339613736666234666564663339 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit: BPF prog-id=171 op=LOAD Oct 2 18:46:35.311000 audit[4202]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=4109 pid=4202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:35.311000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639333234643435336432633234323339613736666234666564663339 Oct 2 18:46:35.311000 audit: BPF prog-id=171 op=UNLOAD Oct 2 18:46:35.311000 audit: BPF prog-id=170 op=UNLOAD Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:46:35.311000 audit: BPF prog-id=172 op=LOAD Oct 2 18:46:35.311000 audit[4202]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=4109 pid=4202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:35.311000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639333234643435336432633234323339613736666234666564663339 Oct 2 18:46:35.336257 env[1139]: time="2023-10-02T18:46:35.336216056Z" level=info msg="StartContainer for \"69324d453d2c24239a76fb4fedf39a9e068e9ff9180ea57e2350cb01a2647ab5\" returns successfully" Oct 2 18:46:35.338622 systemd-networkd[1040]: caliefd09943580: Gained IPv6LL Oct 2 18:46:35.338859 systemd-networkd[1040]: cali8bcba260e81: Gained IPv6LL Oct 2 18:46:35.398816 env[1139]: time="2023-10-02T18:46:35.398764099Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 18:46:35.399640 env[1139]: time="2023-10-02T18:46:35.399598876Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 18:46:35.400164 kubelet[2045]: E1002 18:46:35.399916 2045 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 18:46:35.400164 kubelet[2045]: E1002 18:46:35.399955 2045 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 18:46:35.400164 kubelet[2045]: E1002 18:46:35.400066 2045 kuberuntime_manager.go:872] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-trt9t,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-gxhfr_calico-system(0ac531b4-60de-4c30-9e55-9511dd464d1f): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 18:46:35.400164 kubelet[2045]: E1002 18:46:35.400135 2045 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-gxhfr" podUID=0ac531b4-60de-4c30-9e55-9511dd464d1f Oct 2 18:46:35.587189 kubelet[2045]: I1002 18:46:35.586989 2045 eviction_manager.go:173] "Failed to admit pod to node" pod="tigera-operator/tigera-operator-54b47459dd-cxjc2" nodeCondition=[DiskPressure] Oct 2 18:46:35.836877 systemd[1]: run-containerd-runc-k8s.io-c37a1903a785d364f5fbd97164f6fe3149ad41f52a9c8a9944189931624258e4-runc.j59eSv.mount: Deactivated successfully. Oct 2 18:46:35.986086 kubelet[2045]: I1002 18:46:35.985996 2045 eviction_manager.go:173] "Failed to admit pod to node" pod="tigera-operator/tigera-operator-54b47459dd-n2zgl" nodeCondition=[DiskPressure] Oct 2 18:46:36.008140 kubelet[2045]: E1002 18:46:36.008110 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:36.010382 kubelet[2045]: E1002 18:46:36.010356 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:36.010933 kubelet[2045]: E1002 18:46:36.010916 2045 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-gxhfr" podUID=0ac531b4-60de-4c30-9e55-9511dd464d1f Oct 2 18:46:36.387495 kubelet[2045]: I1002 18:46:36.387335 2045 eviction_manager.go:173] "Failed to admit pod to node" pod="tigera-operator/tigera-operator-54b47459dd-ntjkl" nodeCondition=[DiskPressure] Oct 2 18:46:36.781826 kubelet[2045]: I1002 18:46:36.781785 2045 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-787d4945fb-bbgkt" podStartSLOduration=-9.223371991073027e+09 pod.CreationTimestamp="2023-10-02 18:45:51 +0000 UTC" firstStartedPulling="2023-10-02 18:46:33.27253885 +0000 UTC m=+53.564661379" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:46:36.780345175 +0000 UTC m=+57.072467704" watchObservedRunningTime="2023-10-02 18:46:36.781748844 +0000 UTC m=+57.073871373" Oct 2 18:46:36.823000 audit[4288]: NETFILTER_CFG table=filter:119 family=2 entries=12 op=nft_register_rule pid=4288 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:46:36.826515 kernel: kauditd_printk_skb: 425 callbacks suppressed Oct 2 18:46:36.826592 kernel: audit: type=1325 audit(1696272396.823:1279): table=filter:119 family=2 entries=12 op=nft_register_rule pid=4288 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:46:36.826622 kernel: audit: type=1300 audit(1696272396.823:1279): arch=c00000b7 syscall=211 success=yes exit=4028 a0=3 a1=fffff9a01ed0 a2=0 a3=ffff822476c0 items=0 ppid=2260 pid=4288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:36.823000 audit[4288]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4028 a0=3 a1=fffff9a01ed0 a2=0 a3=ffff822476c0 items=0 ppid=2260 pid=4288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:36.823000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:46:36.830581 kernel: audit: type=1327 audit(1696272396.823:1279): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:46:36.826000 audit[4288]: NETFILTER_CFG table=nat:120 family=2 entries=30 op=nft_register_rule pid=4288 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:46:36.826000 audit[4288]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8836 a0=3 a1=fffff9a01ed0 a2=0 a3=ffff822476c0 items=0 ppid=2260 pid=4288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:36.836652 kernel: audit: type=1325 audit(1696272396.826:1280): table=nat:120 family=2 entries=30 op=nft_register_rule pid=4288 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:46:36.836705 kernel: audit: type=1300 audit(1696272396.826:1280): arch=c00000b7 syscall=211 success=yes exit=8836 a0=3 a1=fffff9a01ed0 a2=0 a3=ffff822476c0 items=0 ppid=2260 pid=4288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:36.836735 kernel: audit: type=1327 audit(1696272396.826:1280): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:46:36.826000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:46:37.012270 kubelet[2045]: E1002 18:46:37.012242 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:37.012707 kubelet[2045]: E1002 18:46:37.012675 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:37.221000 audit[4314]: NETFILTER_CFG table=filter:121 family=2 entries=9 op=nft_register_rule pid=4314 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:46:37.221000 audit[4314]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffd3b1d820 a2=0 a3=ffffb34b86c0 items=0 ppid=2260 pid=4314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:37.227962 kernel: audit: type=1325 audit(1696272397.221:1281): table=filter:121 family=2 entries=9 op=nft_register_rule pid=4314 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:46:37.228019 kernel: audit: type=1300 audit(1696272397.221:1281): arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffd3b1d820 a2=0 a3=ffffb34b86c0 items=0 ppid=2260 pid=4314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:37.228055 kernel: audit: type=1327 audit(1696272397.221:1281): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:46:37.221000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:46:37.226000 audit[4314]: NETFILTER_CFG table=nat:122 family=2 entries=51 op=nft_register_chain pid=4314 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:46:37.226000 audit[4314]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19324 a0=3 a1=ffffd3b1d820 a2=0 a3=ffffb34b86c0 items=0 ppid=2260 pid=4314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:37.226000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:46:37.241463 kernel: audit: type=1325 audit(1696272397.226:1282): table=nat:122 family=2 entries=51 op=nft_register_chain pid=4314 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:46:37.493570 systemd[1]: run-containerd-runc-k8s.io-e43e7c8c3ad7181859774f9add1eddd9dbd37a1d173352226233da485213f578-runc.NEaAs6.mount: Deactivated successfully. Oct 2 18:46:37.549306 kubelet[2045]: E1002 18:46:37.549275 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:37.585340 kubelet[2045]: I1002 18:46:37.584992 2045 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-787d4945fb-c2tbt" podStartSLOduration=-9.223371990269821e+09 pod.CreationTimestamp="2023-10-02 18:45:51 +0000 UTC" firstStartedPulling="2023-10-02 18:46:34.396541082 +0000 UTC m=+54.688663611" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:46:37.584293428 +0000 UTC m=+57.876415957" watchObservedRunningTime="2023-10-02 18:46:37.584955122 +0000 UTC m=+57.877077651" Oct 2 18:46:38.016140 kubelet[2045]: E1002 18:46:38.016054 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:38.016301 kubelet[2045]: E1002 18:46:38.016160 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:38.289000 audit[4363]: NETFILTER_CFG table=filter:123 family=2 entries=6 op=nft_register_rule pid=4363 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:46:38.289000 audit[4363]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffde7da8b0 a2=0 a3=ffffbc8376c0 items=0 ppid=2260 pid=4363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:38.289000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:46:38.291000 audit[4363]: NETFILTER_CFG table=nat:124 family=2 entries=60 op=nft_register_rule pid=4363 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:46:38.291000 audit[4363]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19324 a0=3 a1=ffffde7da8b0 a2=0 a3=ffffbc8376c0 items=0 ppid=2260 pid=4363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:38.291000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:46:38.392614 kubelet[2045]: I1002 18:46:38.392568 2045 eviction_manager.go:173] "Failed to admit pod to node" pod="tigera-operator/tigera-operator-54b47459dd-668lb" nodeCondition=[DiskPressure] Oct 2 18:46:38.831000 audit[4392]: NETFILTER_CFG table=filter:125 family=2 entries=6 op=nft_register_rule pid=4392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:46:38.831000 audit[4392]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffda9e06a0 a2=0 a3=ffffa3c816c0 items=0 ppid=2260 pid=4392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:38.831000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:46:38.838000 audit[4392]: NETFILTER_CFG table=nat:126 family=2 entries=72 op=nft_register_chain pid=4392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:46:38.838000 audit[4392]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24988 a0=3 a1=ffffda9e06a0 a2=0 a3=ffffa3c816c0 items=0 ppid=2260 pid=4392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:38.838000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:46:39.594559 kubelet[2045]: I1002 18:46:39.594525 2045 eviction_manager.go:173] "Failed to admit pod to node" pod="tigera-operator/tigera-operator-54b47459dd-zlzxk" nodeCondition=[DiskPressure] Oct 2 18:46:39.778235 env[1139]: time="2023-10-02T18:46:39.777845473Z" level=info msg="StopPodSandbox for \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\"" Oct 2 18:46:39.882565 env[1139]: 2023-10-02 18:46:39.829 [WARNING][4410] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--gxhfr-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"0ac531b4-60de-4c30-9e55-9511dd464d1f", ResourceVersion:"965", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 46, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"5877dcb8f5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b", Pod:"csi-node-driver-gxhfr", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali8bcba260e81", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:46:39.882565 env[1139]: 2023-10-02 18:46:39.829 [INFO][4410] k8s.go 576: Cleaning up netns ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Oct 2 18:46:39.882565 env[1139]: 2023-10-02 18:46:39.829 [INFO][4410] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" iface="eth0" netns="" Oct 2 18:46:39.882565 env[1139]: 2023-10-02 18:46:39.829 [INFO][4410] k8s.go 583: Releasing IP address(es) ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Oct 2 18:46:39.882565 env[1139]: 2023-10-02 18:46:39.829 [INFO][4410] utils.go 196: Calico CNI releasing IP address ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Oct 2 18:46:39.882565 env[1139]: 2023-10-02 18:46:39.857 [INFO][4419] ipam_plugin.go 416: Releasing address using handleID ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" HandleID="k8s-pod-network.ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Workload="localhost-k8s-csi--node--driver--gxhfr-eth0" Oct 2 18:46:39.882565 env[1139]: time="2023-10-02T18:46:39Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:46:39.882565 env[1139]: time="2023-10-02T18:46:39Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:46:39.882565 env[1139]: 2023-10-02 18:46:39.872 [WARNING][4419] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" HandleID="k8s-pod-network.ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Workload="localhost-k8s-csi--node--driver--gxhfr-eth0" Oct 2 18:46:39.882565 env[1139]: 2023-10-02 18:46:39.872 [INFO][4419] ipam_plugin.go 444: Releasing address using workloadID ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" HandleID="k8s-pod-network.ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Workload="localhost-k8s-csi--node--driver--gxhfr-eth0" Oct 2 18:46:39.882565 env[1139]: time="2023-10-02T18:46:39Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:46:39.882565 env[1139]: 2023-10-02 18:46:39.881 [INFO][4410] k8s.go 589: Teardown processing complete. ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Oct 2 18:46:39.882565 env[1139]: time="2023-10-02T18:46:39.882544453Z" level=info msg="TearDown network for sandbox \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\" successfully" Oct 2 18:46:39.883021 env[1139]: time="2023-10-02T18:46:39.882573533Z" level=info msg="StopPodSandbox for \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\" returns successfully" Oct 2 18:46:39.883282 env[1139]: time="2023-10-02T18:46:39.883248346Z" level=info msg="RemovePodSandbox for \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\"" Oct 2 18:46:39.883407 env[1139]: time="2023-10-02T18:46:39.883370349Z" level=info msg="Forcibly stopping sandbox \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\"" Oct 2 18:46:39.959999 env[1139]: 2023-10-02 18:46:39.926 [WARNING][4442] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--gxhfr-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"0ac531b4-60de-4c30-9e55-9511dd464d1f", ResourceVersion:"965", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 46, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"5877dcb8f5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"193e850c2247dfc53b5b10e487e4eda5c96a8c3e7739e21e209d30d1b7d4013b", Pod:"csi-node-driver-gxhfr", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali8bcba260e81", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:46:39.959999 env[1139]: 2023-10-02 18:46:39.926 [INFO][4442] k8s.go 576: Cleaning up netns ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Oct 2 18:46:39.959999 env[1139]: 2023-10-02 18:46:39.926 [INFO][4442] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" iface="eth0" netns="" Oct 2 18:46:39.959999 env[1139]: 2023-10-02 18:46:39.926 [INFO][4442] k8s.go 583: Releasing IP address(es) ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Oct 2 18:46:39.959999 env[1139]: 2023-10-02 18:46:39.926 [INFO][4442] utils.go 196: Calico CNI releasing IP address ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Oct 2 18:46:39.959999 env[1139]: 2023-10-02 18:46:39.946 [INFO][4450] ipam_plugin.go 416: Releasing address using handleID ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" HandleID="k8s-pod-network.ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Workload="localhost-k8s-csi--node--driver--gxhfr-eth0" Oct 2 18:46:39.959999 env[1139]: time="2023-10-02T18:46:39Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:46:39.959999 env[1139]: time="2023-10-02T18:46:39Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:46:39.959999 env[1139]: 2023-10-02 18:46:39.956 [WARNING][4450] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" HandleID="k8s-pod-network.ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Workload="localhost-k8s-csi--node--driver--gxhfr-eth0" Oct 2 18:46:39.959999 env[1139]: 2023-10-02 18:46:39.956 [INFO][4450] ipam_plugin.go 444: Releasing address using workloadID ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" HandleID="k8s-pod-network.ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Workload="localhost-k8s-csi--node--driver--gxhfr-eth0" Oct 2 18:46:39.959999 env[1139]: time="2023-10-02T18:46:39Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:46:39.959999 env[1139]: 2023-10-02 18:46:39.958 [INFO][4442] k8s.go 589: Teardown processing complete. ContainerID="ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39" Oct 2 18:46:39.960438 env[1139]: time="2023-10-02T18:46:39.960034387Z" level=info msg="TearDown network for sandbox \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\" successfully" Oct 2 18:46:39.972411 env[1139]: time="2023-10-02T18:46:39.972364705Z" level=info msg="RemovePodSandbox \"ba99fa7ff6143b968792e0fb71e4a57261ccc1bd974a1e063801b18a27ed5d39\" returns successfully" Oct 2 18:46:39.972966 env[1139]: time="2023-10-02T18:46:39.972938836Z" level=info msg="StopPodSandbox for \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\"" Oct 2 18:46:39.991418 kubelet[2045]: I1002 18:46:39.991071 2045 eviction_manager.go:173] "Failed to admit pod to node" pod="tigera-operator/tigera-operator-54b47459dd-wq6hw" nodeCondition=[DiskPressure] Oct 2 18:46:40.060501 env[1139]: 2023-10-02 18:46:40.024 [WARNING][4473] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--787d4945fb--c2tbt-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"dfc00849-f8bc-438a-a6e0-f12214fdbed2", ResourceVersion:"980", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 45, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819", Pod:"coredns-787d4945fb-c2tbt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliefd09943580", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:46:40.060501 env[1139]: 2023-10-02 18:46:40.024 [INFO][4473] k8s.go 576: Cleaning up netns ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Oct 2 18:46:40.060501 env[1139]: 2023-10-02 18:46:40.024 [INFO][4473] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" iface="eth0" netns="" Oct 2 18:46:40.060501 env[1139]: 2023-10-02 18:46:40.024 [INFO][4473] k8s.go 583: Releasing IP address(es) ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Oct 2 18:46:40.060501 env[1139]: 2023-10-02 18:46:40.024 [INFO][4473] utils.go 196: Calico CNI releasing IP address ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Oct 2 18:46:40.060501 env[1139]: 2023-10-02 18:46:40.045 [INFO][4481] ipam_plugin.go 416: Releasing address using handleID ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" HandleID="k8s-pod-network.6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Workload="localhost-k8s-coredns--787d4945fb--c2tbt-eth0" Oct 2 18:46:40.060501 env[1139]: time="2023-10-02T18:46:40Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:46:40.060501 env[1139]: time="2023-10-02T18:46:40Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:46:40.060501 env[1139]: 2023-10-02 18:46:40.054 [WARNING][4481] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" HandleID="k8s-pod-network.6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Workload="localhost-k8s-coredns--787d4945fb--c2tbt-eth0" Oct 2 18:46:40.060501 env[1139]: 2023-10-02 18:46:40.054 [INFO][4481] ipam_plugin.go 444: Releasing address using workloadID ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" HandleID="k8s-pod-network.6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Workload="localhost-k8s-coredns--787d4945fb--c2tbt-eth0" Oct 2 18:46:40.060501 env[1139]: time="2023-10-02T18:46:40Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:46:40.060501 env[1139]: 2023-10-02 18:46:40.058 [INFO][4473] k8s.go 589: Teardown processing complete. ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Oct 2 18:46:40.060948 env[1139]: time="2023-10-02T18:46:40.060537460Z" level=info msg="TearDown network for sandbox \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\" successfully" Oct 2 18:46:40.060948 env[1139]: time="2023-10-02T18:46:40.060568701Z" level=info msg="StopPodSandbox for \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\" returns successfully" Oct 2 18:46:40.061472 env[1139]: time="2023-10-02T18:46:40.061346915Z" level=info msg="RemovePodSandbox for \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\"" Oct 2 18:46:40.061472 env[1139]: time="2023-10-02T18:46:40.061385956Z" level=info msg="Forcibly stopping sandbox \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\"" Oct 2 18:46:40.141386 env[1139]: 2023-10-02 18:46:40.099 [WARNING][4503] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--787d4945fb--c2tbt-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"dfc00849-f8bc-438a-a6e0-f12214fdbed2", ResourceVersion:"980", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 45, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"14ddd021d9bc03d246b92d0c0932919aa9676c81404706b5de6b264a3e501819", Pod:"coredns-787d4945fb-c2tbt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliefd09943580", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:46:40.141386 env[1139]: 2023-10-02 18:46:40.099 [INFO][4503] k8s.go 576: Cleaning up netns ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Oct 2 18:46:40.141386 env[1139]: 2023-10-02 18:46:40.099 [INFO][4503] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" iface="eth0" netns="" Oct 2 18:46:40.141386 env[1139]: 2023-10-02 18:46:40.099 [INFO][4503] k8s.go 583: Releasing IP address(es) ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Oct 2 18:46:40.141386 env[1139]: 2023-10-02 18:46:40.099 [INFO][4503] utils.go 196: Calico CNI releasing IP address ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Oct 2 18:46:40.141386 env[1139]: 2023-10-02 18:46:40.124 [INFO][4511] ipam_plugin.go 416: Releasing address using handleID ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" HandleID="k8s-pod-network.6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Workload="localhost-k8s-coredns--787d4945fb--c2tbt-eth0" Oct 2 18:46:40.141386 env[1139]: time="2023-10-02T18:46:40Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:46:40.141386 env[1139]: time="2023-10-02T18:46:40Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:46:40.141386 env[1139]: 2023-10-02 18:46:40.133 [WARNING][4511] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" HandleID="k8s-pod-network.6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Workload="localhost-k8s-coredns--787d4945fb--c2tbt-eth0" Oct 2 18:46:40.141386 env[1139]: 2023-10-02 18:46:40.133 [INFO][4511] ipam_plugin.go 444: Releasing address using workloadID ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" HandleID="k8s-pod-network.6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Workload="localhost-k8s-coredns--787d4945fb--c2tbt-eth0" Oct 2 18:46:40.141386 env[1139]: time="2023-10-02T18:46:40Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:46:40.141386 env[1139]: 2023-10-02 18:46:40.139 [INFO][4503] k8s.go 589: Teardown processing complete. ContainerID="6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe" Oct 2 18:46:40.149106 env[1139]: time="2023-10-02T18:46:40.141350304Z" level=info msg="TearDown network for sandbox \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\" successfully" Oct 2 18:46:40.149106 env[1139]: time="2023-10-02T18:46:40.145181176Z" level=info msg="RemovePodSandbox \"6220d7ecc6508467f9deab8c281f785f539a3631667fe5efbde47df04829f0fe\" returns successfully" Oct 2 18:46:40.149106 env[1139]: time="2023-10-02T18:46:40.148866566Z" level=info msg="StopPodSandbox for \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\"" Oct 2 18:46:40.223123 env[1139]: 2023-10-02 18:46:40.186 [WARNING][4533] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--787d4945fb--bbgkt-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"82f96fa7-627f-4c7d-935f-b21d213344a8", ResourceVersion:"952", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 45, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a", Pod:"coredns-787d4945fb-bbgkt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliad4bae06d9d", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:46:40.223123 env[1139]: 2023-10-02 18:46:40.186 [INFO][4533] k8s.go 576: Cleaning up netns ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Oct 2 18:46:40.223123 env[1139]: 2023-10-02 18:46:40.186 [INFO][4533] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" iface="eth0" netns="" Oct 2 18:46:40.223123 env[1139]: 2023-10-02 18:46:40.186 [INFO][4533] k8s.go 583: Releasing IP address(es) ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Oct 2 18:46:40.223123 env[1139]: 2023-10-02 18:46:40.186 [INFO][4533] utils.go 196: Calico CNI releasing IP address ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Oct 2 18:46:40.223123 env[1139]: 2023-10-02 18:46:40.209 [INFO][4540] ipam_plugin.go 416: Releasing address using handleID ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" HandleID="k8s-pod-network.925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Workload="localhost-k8s-coredns--787d4945fb--bbgkt-eth0" Oct 2 18:46:40.223123 env[1139]: time="2023-10-02T18:46:40Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:46:40.223123 env[1139]: time="2023-10-02T18:46:40Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:46:40.223123 env[1139]: 2023-10-02 18:46:40.218 [WARNING][4540] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" HandleID="k8s-pod-network.925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Workload="localhost-k8s-coredns--787d4945fb--bbgkt-eth0" Oct 2 18:46:40.223123 env[1139]: 2023-10-02 18:46:40.218 [INFO][4540] ipam_plugin.go 444: Releasing address using workloadID ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" HandleID="k8s-pod-network.925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Workload="localhost-k8s-coredns--787d4945fb--bbgkt-eth0" Oct 2 18:46:40.223123 env[1139]: time="2023-10-02T18:46:40Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:46:40.223123 env[1139]: 2023-10-02 18:46:40.221 [INFO][4533] k8s.go 589: Teardown processing complete. ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Oct 2 18:46:40.223592 env[1139]: time="2023-10-02T18:46:40.223174807Z" level=info msg="TearDown network for sandbox \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\" successfully" Oct 2 18:46:40.223592 env[1139]: time="2023-10-02T18:46:40.223209048Z" level=info msg="StopPodSandbox for \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\" returns successfully" Oct 2 18:46:40.223829 env[1139]: time="2023-10-02T18:46:40.223800179Z" level=info msg="RemovePodSandbox for \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\"" Oct 2 18:46:40.223940 env[1139]: time="2023-10-02T18:46:40.223903381Z" level=info msg="Forcibly stopping sandbox \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\"" Oct 2 18:46:40.309881 env[1139]: 2023-10-02 18:46:40.271 [WARNING][4562] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--787d4945fb--bbgkt-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"82f96fa7-627f-4c7d-935f-b21d213344a8", ResourceVersion:"952", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 45, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6639db0485b400782e5f6663bcb5c2dc0b822c4f5a06305cba716904b9f65f7a", Pod:"coredns-787d4945fb-bbgkt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliad4bae06d9d", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:46:40.309881 env[1139]: 2023-10-02 18:46:40.271 [INFO][4562] k8s.go 576: Cleaning up netns ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Oct 2 18:46:40.309881 env[1139]: 2023-10-02 18:46:40.271 [INFO][4562] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" iface="eth0" netns="" Oct 2 18:46:40.309881 env[1139]: 2023-10-02 18:46:40.271 [INFO][4562] k8s.go 583: Releasing IP address(es) ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Oct 2 18:46:40.309881 env[1139]: 2023-10-02 18:46:40.271 [INFO][4562] utils.go 196: Calico CNI releasing IP address ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Oct 2 18:46:40.309881 env[1139]: 2023-10-02 18:46:40.294 [INFO][4569] ipam_plugin.go 416: Releasing address using handleID ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" HandleID="k8s-pod-network.925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Workload="localhost-k8s-coredns--787d4945fb--bbgkt-eth0" Oct 2 18:46:40.309881 env[1139]: time="2023-10-02T18:46:40Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:46:40.309881 env[1139]: time="2023-10-02T18:46:40Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:46:40.309881 env[1139]: 2023-10-02 18:46:40.303 [WARNING][4569] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" HandleID="k8s-pod-network.925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Workload="localhost-k8s-coredns--787d4945fb--bbgkt-eth0" Oct 2 18:46:40.309881 env[1139]: 2023-10-02 18:46:40.303 [INFO][4569] ipam_plugin.go 444: Releasing address using workloadID ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" HandleID="k8s-pod-network.925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Workload="localhost-k8s-coredns--787d4945fb--bbgkt-eth0" Oct 2 18:46:40.309881 env[1139]: time="2023-10-02T18:46:40Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:46:40.309881 env[1139]: 2023-10-02 18:46:40.306 [INFO][4562] k8s.go 589: Teardown processing complete. ContainerID="925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738" Oct 2 18:46:40.310324 env[1139]: time="2023-10-02T18:46:40.309915123Z" level=info msg="TearDown network for sandbox \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\" successfully" Oct 2 18:46:40.312232 env[1139]: time="2023-10-02T18:46:40.312195646Z" level=info msg="RemovePodSandbox \"925f46b986c2f5a6188f674cab5b1d7a652d4b04ef93f3d18804cadea06ee738\" returns successfully" Oct 2 18:46:40.592208 kubelet[2045]: I1002 18:46:40.592006 2045 eviction_manager.go:173] "Failed to admit pod to node" pod="tigera-operator/tigera-operator-54b47459dd-wsrtd" nodeCondition=[DiskPressure] Oct 2 18:46:40.991733 kubelet[2045]: I1002 18:46:40.991699 2045 eviction_manager.go:173] "Failed to admit pod to node" pod="tigera-operator/tigera-operator-54b47459dd-fnvhz" nodeCondition=[DiskPressure] Oct 2 18:46:41.317055 systemd[1]: Started sshd@7-10.0.0.18:22-10.0.0.1:41708.service. Oct 2 18:46:41.316000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.18:22-10.0.0.1:41708 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:46:41.376000 audit[4581]: USER_ACCT pid=4581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:46:41.377833 sshd[4581]: Accepted publickey for core from 10.0.0.1 port 41708 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 18:46:41.377000 audit[4581]: CRED_ACQ pid=4581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:46:41.377000 audit[4581]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc21ac350 a2=3 a3=1 items=0 ppid=1 pid=4581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:41.377000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:46:41.380508 sshd[4581]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:46:41.386142 systemd-logind[1125]: New session 8 of user core. Oct 2 18:46:41.386633 systemd[1]: Started session-8.scope. Oct 2 18:46:41.397000 audit[4581]: USER_START pid=4581 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:46:41.400000 audit[4583]: CRED_ACQ pid=4583 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:46:41.549833 sshd[4581]: pam_unix(sshd:session): session closed for user core Oct 2 18:46:41.549000 audit[4581]: USER_END pid=4581 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:46:41.549000 audit[4581]: CRED_DISP pid=4581 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:46:41.551000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.18:22-10.0.0.1:41708 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:46:41.552832 systemd[1]: sshd@7-10.0.0.18:22-10.0.0.1:41708.service: Deactivated successfully. Oct 2 18:46:41.553619 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 18:46:41.554400 systemd-logind[1125]: Session 8 logged out. Waiting for processes to exit. Oct 2 18:46:41.555161 systemd-logind[1125]: Removed session 8. Oct 2 18:46:41.929366 kubelet[2045]: I1002 18:46:41.929335 2045 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 18:46:41.929366 kubelet[2045]: I1002 18:46:41.929372 2045 container_gc.go:86] "Attempting to delete unused containers" Oct 2 18:46:41.931605 kubelet[2045]: I1002 18:46:41.931564 2045 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 18:46:41.947492 kubelet[2045]: I1002 18:46:41.947462 2045 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 18:46:41.947644 kubelet[2045]: I1002 18:46:41.947629 2045 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[calico-system/csi-node-driver-gxhfr kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost calico-system/calico-typha-5ccdfc8548-2dvzp calico-system/calico-kube-controllers-69c848ddc6-lmcp7 kube-system/coredns-787d4945fb-c2tbt kube-system/coredns-787d4945fb-bbgkt calico-system/calico-node-qmpkh kube-system/kube-proxy-klg9c]" Oct 2 18:46:41.947681 kubelet[2045]: E1002 18:46:41.947661 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-gxhfr" Oct 2 18:46:41.947681 kubelet[2045]: E1002 18:46:41.947675 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 18:46:41.947735 kubelet[2045]: E1002 18:46:41.947686 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 18:46:41.947735 kubelet[2045]: E1002 18:46:41.947697 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 18:46:41.947735 kubelet[2045]: E1002 18:46:41.947707 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-typha-5ccdfc8548-2dvzp" Oct 2 18:46:41.947735 kubelet[2045]: E1002 18:46:41.947717 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-kube-controllers-69c848ddc6-lmcp7" Oct 2 18:46:41.947735 kubelet[2045]: E1002 18:46:41.947727 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-787d4945fb-c2tbt" Oct 2 18:46:41.947735 kubelet[2045]: E1002 18:46:41.947737 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-787d4945fb-bbgkt" Oct 2 18:46:41.947862 kubelet[2045]: E1002 18:46:41.947748 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-node-qmpkh" Oct 2 18:46:41.947862 kubelet[2045]: E1002 18:46:41.947758 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-klg9c" Oct 2 18:46:41.947862 kubelet[2045]: I1002 18:46:41.947766 2045 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 18:46:46.730378 systemd[1]: run-containerd-runc-k8s.io-6ec5f1248b8ff209dcc77a42852a5dd3cf50cddafed0be6088571c9a21f2079d-runc.8olTrp.mount: Deactivated successfully. Oct 2 18:46:49.835272 env[1139]: time="2023-10-02T18:46:49.834889065Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 18:46:50.066765 env[1139]: time="2023-10-02T18:46:50.066681130Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 18:46:50.069403 env[1139]: time="2023-10-02T18:46:50.069345851Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 18:46:50.069684 kubelet[2045]: E1002 18:46:50.069651 2045 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 18:46:50.069973 kubelet[2045]: E1002 18:46:50.069701 2045 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 18:46:50.070150 kubelet[2045]: E1002 18:46:50.070131 2045 kuberuntime_manager.go:872] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-trt9t,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-gxhfr_calico-system(0ac531b4-60de-4c30-9e55-9511dd464d1f): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 18:46:50.071058 env[1139]: time="2023-10-02T18:46:50.071019876Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 18:46:50.076000 audit[1915]: AVC avc: denied { watch } for pid=1915 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7052 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:46:50.079498 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 18:46:50.079566 kernel: audit: type=1400 audit(1696272410.076:1296): avc: denied { watch } for pid=1915 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7052 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:46:50.076000 audit[1915]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000bbb6c0 a2=fc6 a3=0 items=0 ppid=1751 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 key=(null) Oct 2 18:46:50.085305 kernel: audit: type=1300 audit(1696272410.076:1296): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000bbb6c0 a2=fc6 a3=0 items=0 ppid=1751 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 key=(null) Oct 2 18:46:50.085417 kernel: audit: type=1327 audit(1696272410.076:1296): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:46:50.076000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:46:50.078000 audit[1915]: AVC avc: denied { watch } for pid=1915 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7052 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:46:50.090436 kernel: audit: type=1400 audit(1696272410.078:1297): avc: denied { watch } for pid=1915 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7052 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:46:50.078000 audit[1915]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d30700 a2=fc6 a3=0 items=0 ppid=1751 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 key=(null) Oct 2 18:46:50.094165 kernel: audit: type=1300 audit(1696272410.078:1297): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d30700 a2=fc6 a3=0 items=0 ppid=1751 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 key=(null) Oct 2 18:46:50.094266 kernel: audit: type=1327 audit(1696272410.078:1297): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:46:50.078000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:46:50.078000 audit[1915]: AVC avc: denied { watch } for pid=1915 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7052 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:46:50.099481 kernel: audit: type=1400 audit(1696272410.078:1298): avc: denied { watch } for pid=1915 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7052 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:46:50.099581 kernel: audit: type=1300 audit(1696272410.078:1298): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400100a9e0 a2=fc6 a3=0 items=0 ppid=1751 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 key=(null) Oct 2 18:46:50.078000 audit[1915]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400100a9e0 a2=fc6 a3=0 items=0 ppid=1751 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 key=(null) Oct 2 18:46:50.102310 kernel: audit: type=1327 audit(1696272410.078:1298): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:46:50.078000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:46:50.104838 kernel: audit: type=1400 audit(1696272410.078:1299): avc: denied { watch } for pid=1915 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7052 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:46:50.078000 audit[1915]: AVC avc: denied { watch } for pid=1915 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7052 scontext=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:46:50.078000 audit[1915]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000bbb6e0 a2=fc6 a3=0 items=0 ppid=1751 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c288,c629 key=(null) Oct 2 18:46:50.078000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:46:50.233334 env[1139]: time="2023-10-02T18:46:50.232177012Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 18:46:50.233334 env[1139]: time="2023-10-02T18:46:50.232955544Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 18:46:50.233541 kubelet[2045]: E1002 18:46:50.233203 2045 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 18:46:50.233541 kubelet[2045]: E1002 18:46:50.233254 2045 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 18:46:50.233541 kubelet[2045]: E1002 18:46:50.233359 2045 kuberuntime_manager.go:872] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-trt9t,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-gxhfr_calico-system(0ac531b4-60de-4c30-9e55-9511dd464d1f): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 18:46:50.233541 kubelet[2045]: E1002 18:46:50.233419 2045 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-gxhfr" podUID=0ac531b4-60de-4c30-9e55-9511dd464d1f Oct 2 18:46:51.554000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.18:22-10.0.0.1:59334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:46:51.555784 systemd[1]: Started sshd@8-10.0.0.18:22-10.0.0.1:59334.service. Oct 2 18:46:51.612000 audit[4676]: USER_ACCT pid=4676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:46:51.613967 sshd[4676]: Accepted publickey for core from 10.0.0.1 port 59334 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 18:46:51.613000 audit[4676]: CRED_ACQ pid=4676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:46:51.613000 audit[4676]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe8947080 a2=3 a3=1 items=0 ppid=1 pid=4676 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:46:51.613000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:46:51.615710 sshd[4676]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:46:51.620050 systemd-logind[1125]: New session 9 of user core. Oct 2 18:46:51.620933 systemd[1]: Started session-9.scope. Oct 2 18:46:51.624000 audit[4676]: USER_START pid=4676 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:46:51.627000 audit[4678]: CRED_ACQ pid=4678 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:46:51.780656 sshd[4676]: pam_unix(sshd:session): session closed for user core Oct 2 18:46:51.780000 audit[4676]: USER_END pid=4676 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:46:51.780000 audit[4676]: CRED_DISP pid=4676 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:46:51.782000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.18:22-10.0.0.1:59334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:46:51.783217 systemd[1]: sshd@8-10.0.0.18:22-10.0.0.1:59334.service: Deactivated successfully. Oct 2 18:46:51.784964 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 18:46:51.785685 systemd-logind[1125]: Session 9 logged out. Waiting for processes to exit. Oct 2 18:46:51.786809 systemd-logind[1125]: Removed session 9. Oct 2 18:46:51.973756 kubelet[2045]: I1002 18:46:51.973711 2045 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 18:46:51.973756 kubelet[2045]: I1002 18:46:51.973762 2045 container_gc.go:86] "Attempting to delete unused containers" Oct 2 18:46:51.977542 kubelet[2045]: I1002 18:46:51.977515 2045 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 18:46:51.998841 kubelet[2045]: I1002 18:46:51.998815 2045 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 18:46:51.999212 kubelet[2045]: I1002 18:46:51.999194 2045 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[calico-system/csi-node-driver-gxhfr kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost calico-system/calico-typha-5ccdfc8548-2dvzp calico-system/calico-kube-controllers-69c848ddc6-lmcp7 kube-system/coredns-787d4945fb-c2tbt kube-system/coredns-787d4945fb-bbgkt calico-system/calico-node-qmpkh kube-system/kube-proxy-klg9c]" Oct 2 18:46:51.999343 kubelet[2045]: E1002 18:46:51.999329 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-gxhfr" Oct 2 18:46:51.999430 kubelet[2045]: E1002 18:46:51.999419 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 18:46:51.999517 kubelet[2045]: E1002 18:46:51.999506 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 18:46:51.999603 kubelet[2045]: E1002 18:46:51.999593 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 18:46:51.999677 kubelet[2045]: E1002 18:46:51.999668 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-typha-5ccdfc8548-2dvzp" Oct 2 18:46:51.999742 kubelet[2045]: E1002 18:46:51.999725 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-kube-controllers-69c848ddc6-lmcp7" Oct 2 18:46:51.999802 kubelet[2045]: E1002 18:46:51.999793 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-787d4945fb-c2tbt" Oct 2 18:46:51.999876 kubelet[2045]: E1002 18:46:51.999867 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-787d4945fb-bbgkt" Oct 2 18:46:51.999955 kubelet[2045]: E1002 18:46:51.999946 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-node-qmpkh" Oct 2 18:46:52.000035 kubelet[2045]: E1002 18:46:52.000026 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-klg9c" Oct 2 18:46:52.000107 kubelet[2045]: I1002 18:46:52.000098 2045 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 18:46:55.833221 kubelet[2045]: E1002 18:46:55.833183 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:46:57.502812 systemd[1]: run-containerd-runc-k8s.io-e43e7c8c3ad7181859774f9add1eddd9dbd37a1d173352226233da485213f578-runc.IIacWX.mount: Deactivated successfully. Oct 2 18:47:01.784647 systemd[1]: Started sshd@9-10.0.0.18:22-10.0.0.1:46696.service. Oct 2 18:47:01.785730 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 18:47:01.785803 kernel: audit: type=1130 audit(1696272421.783:1309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.18:22-10.0.0.1:46696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:01.783000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.18:22-10.0.0.1:46696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:01.845000 audit[4766]: USER_ACCT pid=4766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:01.846988 sshd[4766]: Accepted publickey for core from 10.0.0.1 port 46696 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 18:47:01.846000 audit[4766]: CRED_ACQ pid=4766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:01.848202 sshd[4766]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:47:01.851309 kernel: audit: type=1101 audit(1696272421.845:1310): pid=4766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:01.851683 kernel: audit: type=1103 audit(1696272421.846:1311): pid=4766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:01.851721 kernel: audit: type=1006 audit(1696272421.846:1312): pid=4766 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 18:47:01.846000 audit[4766]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffffd5bc0 a2=3 a3=1 items=0 ppid=1 pid=4766 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:01.855897 kernel: audit: type=1300 audit(1696272421.846:1312): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffffd5bc0 a2=3 a3=1 items=0 ppid=1 pid=4766 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:01.855985 kernel: audit: type=1327 audit(1696272421.846:1312): proctitle=737368643A20636F7265205B707269765D Oct 2 18:47:01.846000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:47:01.855168 systemd-logind[1125]: New session 10 of user core. Oct 2 18:47:01.856647 systemd[1]: Started session-10.scope. Oct 2 18:47:01.860000 audit[4766]: USER_START pid=4766 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:01.863000 audit[4768]: CRED_ACQ pid=4768 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:01.867237 kernel: audit: type=1105 audit(1696272421.860:1313): pid=4766 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:01.867329 kernel: audit: type=1103 audit(1696272421.863:1314): pid=4768 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:02.010108 sshd[4766]: pam_unix(sshd:session): session closed for user core Oct 2 18:47:02.009000 audit[4766]: USER_END pid=4766 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:02.009000 audit[4766]: CRED_DISP pid=4766 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:02.012944 systemd[1]: sshd@9-10.0.0.18:22-10.0.0.1:46696.service: Deactivated successfully. Oct 2 18:47:02.013762 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 18:47:02.014457 systemd-logind[1125]: Session 10 logged out. Waiting for processes to exit. Oct 2 18:47:02.015216 systemd-logind[1125]: Removed session 10. Oct 2 18:47:02.015983 kernel: audit: type=1106 audit(1696272422.009:1315): pid=4766 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:02.016064 kernel: audit: type=1104 audit(1696272422.009:1316): pid=4766 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:02.009000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.18:22-10.0.0.1:46696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:02.026081 kubelet[2045]: I1002 18:47:02.026034 2045 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 18:47:02.026081 kubelet[2045]: I1002 18:47:02.026076 2045 container_gc.go:86] "Attempting to delete unused containers" Oct 2 18:47:02.028207 kubelet[2045]: I1002 18:47:02.028177 2045 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 18:47:02.044914 kubelet[2045]: I1002 18:47:02.044816 2045 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 18:47:02.045085 kubelet[2045]: I1002 18:47:02.045067 2045 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[calico-system/csi-node-driver-gxhfr kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost calico-system/calico-typha-5ccdfc8548-2dvzp kube-system/coredns-787d4945fb-bbgkt calico-system/calico-kube-controllers-69c848ddc6-lmcp7 kube-system/coredns-787d4945fb-c2tbt calico-system/calico-node-qmpkh kube-system/kube-proxy-klg9c]" Oct 2 18:47:02.045128 kubelet[2045]: E1002 18:47:02.045113 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-gxhfr" Oct 2 18:47:02.045153 kubelet[2045]: E1002 18:47:02.045129 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 18:47:02.045153 kubelet[2045]: E1002 18:47:02.045140 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 18:47:02.045153 kubelet[2045]: E1002 18:47:02.045151 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 18:47:02.045223 kubelet[2045]: E1002 18:47:02.045174 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-typha-5ccdfc8548-2dvzp" Oct 2 18:47:02.045223 kubelet[2045]: E1002 18:47:02.045186 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-787d4945fb-bbgkt" Oct 2 18:47:02.045223 kubelet[2045]: E1002 18:47:02.045198 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-kube-controllers-69c848ddc6-lmcp7" Oct 2 18:47:02.045223 kubelet[2045]: E1002 18:47:02.045209 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-787d4945fb-c2tbt" Oct 2 18:47:02.045223 kubelet[2045]: E1002 18:47:02.045220 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-node-qmpkh" Oct 2 18:47:02.045333 kubelet[2045]: E1002 18:47:02.045229 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-klg9c" Oct 2 18:47:02.045333 kubelet[2045]: I1002 18:47:02.045238 2045 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 18:47:03.843707 kubelet[2045]: E1002 18:47:03.842016 2045 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-gxhfr" podUID=0ac531b4-60de-4c30-9e55-9511dd464d1f Oct 2 18:47:04.833566 kubelet[2045]: E1002 18:47:04.833527 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:47:05.833247 kubelet[2045]: E1002 18:47:05.833214 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:47:06.731077 systemd[1]: run-containerd-runc-k8s.io-6ec5f1248b8ff209dcc77a42852a5dd3cf50cddafed0be6088571c9a21f2079d-runc.bQ3T6t.mount: Deactivated successfully. Oct 2 18:47:07.837528 kubelet[2045]: E1002 18:47:07.837129 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:47:12.015246 systemd[1]: Started sshd@10-10.0.0.18:22-10.0.0.1:41232.service. Oct 2 18:47:12.013000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.18:22-10.0.0.1:41232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:12.018005 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:47:12.018084 kernel: audit: type=1130 audit(1696272432.013:1318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.18:22-10.0.0.1:41232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:12.061000 audit[4852]: USER_ACCT pid=4852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:12.062822 sshd[4852]: Accepted publickey for core from 10.0.0.1 port 41232 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 18:47:12.065475 kernel: audit: type=1101 audit(1696272432.061:1319): pid=4852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:12.066376 kubelet[2045]: I1002 18:47:12.066344 2045 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 18:47:12.066376 kubelet[2045]: I1002 18:47:12.066382 2045 container_gc.go:86] "Attempting to delete unused containers" Oct 2 18:47:12.066000 audit[4852]: CRED_ACQ pid=4852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:12.069913 kubelet[2045]: I1002 18:47:12.069892 2045 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 18:47:12.071268 sshd[4852]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:47:12.072485 kernel: audit: type=1103 audit(1696272432.066:1320): pid=4852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:12.072551 kernel: audit: type=1006 audit(1696272432.068:1321): pid=4852 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 18:47:12.072579 kernel: audit: type=1300 audit(1696272432.068:1321): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc7eaf360 a2=3 a3=1 items=0 ppid=1 pid=4852 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:12.068000 audit[4852]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc7eaf360 a2=3 a3=1 items=0 ppid=1 pid=4852 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:12.074744 kernel: audit: type=1327 audit(1696272432.068:1321): proctitle=737368643A20636F7265205B707269765D Oct 2 18:47:12.068000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:47:12.076555 systemd-logind[1125]: New session 11 of user core. Oct 2 18:47:12.077074 systemd[1]: Started session-11.scope. Oct 2 18:47:12.080000 audit[4852]: USER_START pid=4852 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:12.081000 audit[4854]: CRED_ACQ pid=4854 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:12.086512 kernel: audit: type=1105 audit(1696272432.080:1322): pid=4852 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:12.086582 kernel: audit: type=1103 audit(1696272432.081:1323): pid=4854 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:12.096008 kubelet[2045]: I1002 18:47:12.095978 2045 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 18:47:12.096180 kubelet[2045]: I1002 18:47:12.096157 2045 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[calico-system/csi-node-driver-gxhfr kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost calico-system/calico-typha-5ccdfc8548-2dvzp calico-system/calico-kube-controllers-69c848ddc6-lmcp7 kube-system/coredns-787d4945fb-c2tbt kube-system/coredns-787d4945fb-bbgkt calico-system/calico-node-qmpkh kube-system/kube-proxy-klg9c]" Oct 2 18:47:12.096218 kubelet[2045]: E1002 18:47:12.096192 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-gxhfr" Oct 2 18:47:12.096218 kubelet[2045]: E1002 18:47:12.096210 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 18:47:12.096266 kubelet[2045]: E1002 18:47:12.096220 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 18:47:12.096266 kubelet[2045]: E1002 18:47:12.096231 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 18:47:12.096266 kubelet[2045]: E1002 18:47:12.096242 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-typha-5ccdfc8548-2dvzp" Oct 2 18:47:12.096266 kubelet[2045]: E1002 18:47:12.096253 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-kube-controllers-69c848ddc6-lmcp7" Oct 2 18:47:12.096266 kubelet[2045]: E1002 18:47:12.096263 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-787d4945fb-c2tbt" Oct 2 18:47:12.096424 kubelet[2045]: E1002 18:47:12.096284 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-787d4945fb-bbgkt" Oct 2 18:47:12.096424 kubelet[2045]: E1002 18:47:12.096295 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-node-qmpkh" Oct 2 18:47:12.096424 kubelet[2045]: E1002 18:47:12.096312 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-klg9c" Oct 2 18:47:12.096424 kubelet[2045]: I1002 18:47:12.096327 2045 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 18:47:12.207358 sshd[4852]: pam_unix(sshd:session): session closed for user core Oct 2 18:47:12.207000 audit[4852]: USER_END pid=4852 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:12.208000 audit[4852]: CRED_DISP pid=4852 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:12.211916 systemd[1]: Started sshd@11-10.0.0.18:22-10.0.0.1:41240.service. Oct 2 18:47:12.212525 systemd[1]: sshd@10-10.0.0.18:22-10.0.0.1:41232.service: Deactivated successfully. Oct 2 18:47:12.213525 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 18:47:12.213839 kernel: audit: type=1106 audit(1696272432.207:1324): pid=4852 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:12.213880 kernel: audit: type=1104 audit(1696272432.208:1325): pid=4852 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:12.210000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.18:22-10.0.0.1:41240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:12.211000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.18:22-10.0.0.1:41232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:12.214168 systemd-logind[1125]: Session 11 logged out. Waiting for processes to exit. Oct 2 18:47:12.215361 systemd-logind[1125]: Removed session 11. Oct 2 18:47:12.257000 audit[4865]: USER_ACCT pid=4865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:12.259360 sshd[4865]: Accepted publickey for core from 10.0.0.1 port 41240 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 18:47:12.258000 audit[4865]: CRED_ACQ pid=4865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:12.258000 audit[4865]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc5525ec0 a2=3 a3=1 items=0 ppid=1 pid=4865 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:12.258000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:47:12.260833 sshd[4865]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:47:12.264514 systemd-logind[1125]: New session 12 of user core. Oct 2 18:47:12.265228 systemd[1]: Started session-12.scope. Oct 2 18:47:12.267000 audit[4865]: USER_START pid=4865 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:12.269000 audit[4868]: CRED_ACQ pid=4868 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:13.143917 sshd[4865]: pam_unix(sshd:session): session closed for user core Oct 2 18:47:13.148441 systemd[1]: Started sshd@12-10.0.0.18:22-10.0.0.1:42334.service. Oct 2 18:47:13.148000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.18:22-10.0.0.1:42334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:13.153000 audit[4865]: USER_END pid=4865 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:13.153000 audit[4865]: CRED_DISP pid=4865 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:13.158254 systemd[1]: sshd@11-10.0.0.18:22-10.0.0.1:41240.service: Deactivated successfully. Oct 2 18:47:13.158000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.18:22-10.0.0.1:41240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:13.159093 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 18:47:13.163580 systemd-logind[1125]: Session 12 logged out. Waiting for processes to exit. Oct 2 18:47:13.166890 systemd-logind[1125]: Removed session 12. Oct 2 18:47:13.199000 audit[4876]: USER_ACCT pid=4876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:13.199804 sshd[4876]: Accepted publickey for core from 10.0.0.1 port 42334 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 18:47:13.200000 audit[4876]: CRED_ACQ pid=4876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:13.200000 audit[4876]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdf9ab230 a2=3 a3=1 items=0 ppid=1 pid=4876 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:13.200000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:47:13.201024 sshd[4876]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:47:13.204549 systemd-logind[1125]: New session 13 of user core. Oct 2 18:47:13.205574 systemd[1]: Started session-13.scope. Oct 2 18:47:13.209000 audit[4876]: USER_START pid=4876 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:13.211000 audit[4879]: CRED_ACQ pid=4879 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:13.339515 sshd[4876]: pam_unix(sshd:session): session closed for user core Oct 2 18:47:13.340000 audit[4876]: USER_END pid=4876 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:13.340000 audit[4876]: CRED_DISP pid=4876 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:13.342526 systemd[1]: sshd@12-10.0.0.18:22-10.0.0.1:42334.service: Deactivated successfully. Oct 2 18:47:13.343272 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 18:47:13.341000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.18:22-10.0.0.1:42334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:13.343955 systemd-logind[1125]: Session 13 logged out. Waiting for processes to exit. Oct 2 18:47:13.344813 systemd-logind[1125]: Removed session 13. Oct 2 18:47:18.842779 env[1139]: time="2023-10-02T18:47:18.842703185Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 18:47:19.006461 env[1139]: time="2023-10-02T18:47:19.006375825Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 18:47:19.007246 env[1139]: time="2023-10-02T18:47:19.007204873Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 18:47:19.007474 kubelet[2045]: E1002 18:47:19.007416 2045 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 18:47:19.007756 kubelet[2045]: E1002 18:47:19.007476 2045 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 18:47:19.007756 kubelet[2045]: E1002 18:47:19.007608 2045 kuberuntime_manager.go:872] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-trt9t,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-gxhfr_calico-system(0ac531b4-60de-4c30-9e55-9511dd464d1f): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 18:47:19.008468 env[1139]: time="2023-10-02T18:47:19.008427844Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 18:47:19.164108 env[1139]: time="2023-10-02T18:47:19.163972708Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 18:47:19.164863 env[1139]: time="2023-10-02T18:47:19.164796916Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 18:47:19.165078 kubelet[2045]: E1002 18:47:19.165014 2045 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 18:47:19.165078 kubelet[2045]: E1002 18:47:19.165058 2045 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 18:47:19.165268 kubelet[2045]: E1002 18:47:19.165143 2045 kuberuntime_manager.go:872] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-trt9t,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-gxhfr_calico-system(0ac531b4-60de-4c30-9e55-9511dd464d1f): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 18:47:19.165268 kubelet[2045]: E1002 18:47:19.165199 2045 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-gxhfr" podUID=0ac531b4-60de-4c30-9e55-9511dd464d1f Oct 2 18:47:22.120285 kubelet[2045]: I1002 18:47:22.120242 2045 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 18:47:22.120285 kubelet[2045]: I1002 18:47:22.120287 2045 container_gc.go:86] "Attempting to delete unused containers" Oct 2 18:47:22.122594 kubelet[2045]: I1002 18:47:22.122540 2045 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 18:47:22.146823 kubelet[2045]: I1002 18:47:22.146779 2045 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 18:47:22.147142 kubelet[2045]: I1002 18:47:22.147106 2045 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[calico-system/csi-node-driver-gxhfr kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost calico-system/calico-typha-5ccdfc8548-2dvzp kube-system/coredns-787d4945fb-bbgkt calico-system/calico-kube-controllers-69c848ddc6-lmcp7 kube-system/coredns-787d4945fb-c2tbt calico-system/calico-node-qmpkh kube-system/kube-proxy-klg9c]" Oct 2 18:47:22.147186 kubelet[2045]: E1002 18:47:22.147146 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-gxhfr" Oct 2 18:47:22.147186 kubelet[2045]: E1002 18:47:22.147162 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 18:47:22.147186 kubelet[2045]: E1002 18:47:22.147184 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 18:47:22.147295 kubelet[2045]: E1002 18:47:22.147211 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 18:47:22.147295 kubelet[2045]: E1002 18:47:22.147223 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-typha-5ccdfc8548-2dvzp" Oct 2 18:47:22.147295 kubelet[2045]: E1002 18:47:22.147233 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-787d4945fb-bbgkt" Oct 2 18:47:22.147295 kubelet[2045]: E1002 18:47:22.147254 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-kube-controllers-69c848ddc6-lmcp7" Oct 2 18:47:22.147295 kubelet[2045]: E1002 18:47:22.147266 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-787d4945fb-c2tbt" Oct 2 18:47:22.147295 kubelet[2045]: E1002 18:47:22.147277 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-node-qmpkh" Oct 2 18:47:22.147295 kubelet[2045]: E1002 18:47:22.147290 2045 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-klg9c" Oct 2 18:47:22.147295 kubelet[2045]: I1002 18:47:22.147301 2045 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 18:47:22.833091 kubelet[2045]: E1002 18:47:22.833053 2045 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:47:23.345219 systemd[1]: Started sshd@13-10.0.0.18:22-10.0.0.1:58630.service. Oct 2 18:47:23.344000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.18:22-10.0.0.1:58630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:23.346162 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 18:47:23.346231 kernel: audit: type=1130 audit(1696272443.344:1345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.18:22-10.0.0.1:58630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:23.390000 audit[4953]: USER_ACCT pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:23.391219 sshd[4953]: Accepted publickey for core from 10.0.0.1 port 58630 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 18:47:23.393176 sshd[4953]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:47:23.392000 audit[4953]: CRED_ACQ pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:23.395671 kernel: audit: type=1101 audit(1696272443.390:1346): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:23.395844 kernel: audit: type=1103 audit(1696272443.392:1347): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:23.397036 kernel: audit: type=1006 audit(1696272443.392:1348): pid=4953 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 18:47:23.398507 kernel: audit: type=1300 audit(1696272443.392:1348): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1fde190 a2=3 a3=1 items=0 ppid=1 pid=4953 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:23.392000 audit[4953]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1fde190 a2=3 a3=1 items=0 ppid=1 pid=4953 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:23.397700 systemd-logind[1125]: New session 14 of user core. Oct 2 18:47:23.398162 systemd[1]: Started session-14.scope. Oct 2 18:47:23.392000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:47:23.401708 kernel: audit: type=1327 audit(1696272443.392:1348): proctitle=737368643A20636F7265205B707269765D Oct 2 18:47:23.401000 audit[4953]: USER_START pid=4953 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:23.405691 kernel: audit: type=1105 audit(1696272443.401:1349): pid=4953 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:23.405738 kernel: audit: type=1103 audit(1696272443.403:1350): pid=4955 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:23.403000 audit[4955]: CRED_ACQ pid=4955 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:23.527442 sshd[4953]: pam_unix(sshd:session): session closed for user core Oct 2 18:47:23.528000 audit[4953]: USER_END pid=4953 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:23.530426 systemd-logind[1125]: Session 14 logged out. Waiting for processes to exit. Oct 2 18:47:23.530680 systemd[1]: sshd@13-10.0.0.18:22-10.0.0.1:58630.service: Deactivated successfully. Oct 2 18:47:23.528000 audit[4953]: CRED_DISP pid=4953 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:23.531516 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 18:47:23.532099 systemd-logind[1125]: Removed session 14. Oct 2 18:47:23.533245 kernel: audit: type=1106 audit(1696272443.528:1351): pid=4953 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:23.533319 kernel: audit: type=1104 audit(1696272443.528:1352): pid=4953 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:47:23.530000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.18:22-10.0.0.1:58630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:24.479000 audit[4990]: NETFILTER_CFG table=filter:127 family=2 entries=6 op=nft_register_rule pid=4990 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:47:24.479000 audit[4990]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffee968570 a2=0 a3=ffffb01366c0 items=0 ppid=2260 pid=4990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:24.479000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:47:24.481000 audit[4990]: NETFILTER_CFG table=nat:128 family=2 entries=78 op=nft_register_rule pid=4990 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:47:24.481000 audit[4990]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24988 a0=3 a1=ffffee968570 a2=0 a3=ffffb01366c0 items=0 ppid=2260 pid=4990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:24.481000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:47:24.534000 audit[5016]: NETFILTER_CFG table=filter:129 family=2 entries=7 op=nft_register_rule pid=5016 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:47:24.534000 audit[5016]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2620 a0=3 a1=ffffdbe236b0 a2=0 a3=ffffb2c816c0 items=0 ppid=2260 pid=5016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:24.534000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:47:24.536000 audit[5016]: NETFILTER_CFG table=nat:130 family=2 entries=78 op=nft_register_rule pid=5016 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:47:24.536000 audit[5016]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24988 a0=3 a1=ffffdbe236b0 a2=0 a3=ffffb2c816c0 items=0 ppid=2260 pid=5016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:24.536000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273