Oct 2 18:57:54.745770 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Oct 2 18:57:54.745789 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 18:57:54.745797 kernel: efi: EFI v2.70 by EDK II Oct 2 18:57:54.745803 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Oct 2 18:57:54.745807 kernel: random: crng init done Oct 2 18:57:54.745813 kernel: ACPI: Early table checksum verification disabled Oct 2 18:57:54.745819 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Oct 2 18:57:54.745826 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Oct 2 18:57:54.745831 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 18:57:54.745836 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 18:57:54.745842 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 18:57:54.745847 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 18:57:54.745853 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 18:57:54.745858 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 18:57:54.745866 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 18:57:54.745872 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 18:57:54.745885 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 18:57:54.745894 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Oct 2 18:57:54.745899 kernel: NUMA: Failed to initialise from firmware Oct 2 18:57:54.745905 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 18:57:54.745911 kernel: NUMA: NODE_DATA [mem 0xdcb0b900-0xdcb10fff] Oct 2 18:57:54.745917 kernel: Zone ranges: Oct 2 18:57:54.745922 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 18:57:54.745930 kernel: DMA32 empty Oct 2 18:57:54.745935 kernel: Normal empty Oct 2 18:57:54.745941 kernel: Movable zone start for each node Oct 2 18:57:54.745946 kernel: Early memory node ranges Oct 2 18:57:54.745952 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Oct 2 18:57:54.745958 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Oct 2 18:57:54.745963 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Oct 2 18:57:54.745969 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Oct 2 18:57:54.745974 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Oct 2 18:57:54.745980 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Oct 2 18:57:54.745986 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Oct 2 18:57:54.745991 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 18:57:54.745998 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Oct 2 18:57:54.746004 kernel: psci: probing for conduit method from ACPI. Oct 2 18:57:54.746010 kernel: psci: PSCIv1.1 detected in firmware. Oct 2 18:57:54.746015 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 18:57:54.746021 kernel: psci: Trusted OS migration not required Oct 2 18:57:54.746029 kernel: psci: SMC Calling Convention v1.1 Oct 2 18:57:54.746035 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Oct 2 18:57:54.746042 kernel: ACPI: SRAT not present Oct 2 18:57:54.746049 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 18:57:54.746055 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 18:57:54.746061 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Oct 2 18:57:54.746067 kernel: Detected PIPT I-cache on CPU0 Oct 2 18:57:54.746073 kernel: CPU features: detected: GIC system register CPU interface Oct 2 18:57:54.746079 kernel: CPU features: detected: Hardware dirty bit management Oct 2 18:57:54.746085 kernel: CPU features: detected: Spectre-v4 Oct 2 18:57:54.746091 kernel: CPU features: detected: Spectre-BHB Oct 2 18:57:54.746098 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 18:57:54.746104 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 18:57:54.746110 kernel: CPU features: detected: ARM erratum 1418040 Oct 2 18:57:54.746116 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Oct 2 18:57:54.746122 kernel: Policy zone: DMA Oct 2 18:57:54.746129 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 18:57:54.746135 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 18:57:54.746142 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 18:57:54.746148 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 18:57:54.746154 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 18:57:54.746160 kernel: Memory: 2459280K/2572288K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 113008K reserved, 0K cma-reserved) Oct 2 18:57:54.746182 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 2 18:57:54.746188 kernel: trace event string verifier disabled Oct 2 18:57:54.746194 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 18:57:54.746201 kernel: rcu: RCU event tracing is enabled. Oct 2 18:57:54.746207 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 2 18:57:54.746213 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 18:57:54.746219 kernel: Tracing variant of Tasks RCU enabled. Oct 2 18:57:54.746225 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 18:57:54.746232 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 2 18:57:54.746237 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 18:57:54.746243 kernel: GICv3: 256 SPIs implemented Oct 2 18:57:54.746250 kernel: GICv3: 0 Extended SPIs implemented Oct 2 18:57:54.746256 kernel: GICv3: Distributor has no Range Selector support Oct 2 18:57:54.746263 kernel: Root IRQ handler: gic_handle_irq Oct 2 18:57:54.746268 kernel: GICv3: 16 PPIs implemented Oct 2 18:57:54.746274 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Oct 2 18:57:54.746280 kernel: ACPI: SRAT not present Oct 2 18:57:54.746286 kernel: ITS [mem 0x08080000-0x0809ffff] Oct 2 18:57:54.746292 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Oct 2 18:57:54.746298 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Oct 2 18:57:54.746305 kernel: GICv3: using LPI property table @0x00000000400d0000 Oct 2 18:57:54.746311 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Oct 2 18:57:54.746316 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 18:57:54.746324 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Oct 2 18:57:54.746330 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Oct 2 18:57:54.746336 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Oct 2 18:57:54.746342 kernel: arm-pv: using stolen time PV Oct 2 18:57:54.746349 kernel: Console: colour dummy device 80x25 Oct 2 18:57:54.746355 kernel: ACPI: Core revision 20210730 Oct 2 18:57:54.746361 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Oct 2 18:57:54.746367 kernel: pid_max: default: 32768 minimum: 301 Oct 2 18:57:54.746374 kernel: LSM: Security Framework initializing Oct 2 18:57:54.746380 kernel: SELinux: Initializing. Oct 2 18:57:54.746387 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 18:57:54.746394 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 18:57:54.746400 kernel: rcu: Hierarchical SRCU implementation. Oct 2 18:57:54.746407 kernel: Platform MSI: ITS@0x8080000 domain created Oct 2 18:57:54.746413 kernel: PCI/MSI: ITS@0x8080000 domain created Oct 2 18:57:54.746419 kernel: Remapping and enabling EFI services. Oct 2 18:57:54.746425 kernel: smp: Bringing up secondary CPUs ... Oct 2 18:57:54.746431 kernel: Detected PIPT I-cache on CPU1 Oct 2 18:57:54.746437 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Oct 2 18:57:54.746445 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Oct 2 18:57:54.746452 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 18:57:54.746458 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Oct 2 18:57:54.746464 kernel: Detected PIPT I-cache on CPU2 Oct 2 18:57:54.746471 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Oct 2 18:57:54.746477 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Oct 2 18:57:54.746483 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 18:57:54.746489 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Oct 2 18:57:54.746495 kernel: Detected PIPT I-cache on CPU3 Oct 2 18:57:54.746502 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Oct 2 18:57:54.746513 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Oct 2 18:57:54.746520 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 18:57:54.746526 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Oct 2 18:57:54.746532 kernel: smp: Brought up 1 node, 4 CPUs Oct 2 18:57:54.746543 kernel: SMP: Total of 4 processors activated. Oct 2 18:57:54.746551 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 18:57:54.746557 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 2 18:57:54.746564 kernel: CPU features: detected: Common not Private translations Oct 2 18:57:54.746571 kernel: CPU features: detected: CRC32 instructions Oct 2 18:57:54.746577 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 2 18:57:54.746584 kernel: CPU features: detected: LSE atomic instructions Oct 2 18:57:54.746590 kernel: CPU features: detected: Privileged Access Never Oct 2 18:57:54.746599 kernel: CPU features: detected: RAS Extension Support Oct 2 18:57:54.746605 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Oct 2 18:57:54.746612 kernel: CPU: All CPU(s) started at EL1 Oct 2 18:57:54.746618 kernel: alternatives: patching kernel code Oct 2 18:57:54.746624 kernel: devtmpfs: initialized Oct 2 18:57:54.746632 kernel: KASLR enabled Oct 2 18:57:54.746639 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 18:57:54.746645 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 2 18:57:54.746652 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 18:57:54.746658 kernel: SMBIOS 3.0.0 present. Oct 2 18:57:54.746665 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Oct 2 18:57:54.746671 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 18:57:54.746678 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 18:57:54.746685 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 18:57:54.746693 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 18:57:54.746699 kernel: audit: initializing netlink subsys (disabled) Oct 2 18:57:54.746706 kernel: audit: type=2000 audit(0.032:1): state=initialized audit_enabled=0 res=1 Oct 2 18:57:54.746712 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 18:57:54.746719 kernel: cpuidle: using governor menu Oct 2 18:57:54.746725 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 18:57:54.746734 kernel: ASID allocator initialised with 32768 entries Oct 2 18:57:54.746741 kernel: ACPI: bus type PCI registered Oct 2 18:57:54.746747 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 18:57:54.746755 kernel: Serial: AMBA PL011 UART driver Oct 2 18:57:54.746762 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 18:57:54.746768 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 18:57:54.746775 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 18:57:54.746782 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 18:57:54.746788 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 18:57:54.746795 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 18:57:54.746801 kernel: ACPI: Added _OSI(Module Device) Oct 2 18:57:54.746808 kernel: ACPI: Added _OSI(Processor Device) Oct 2 18:57:54.746815 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 18:57:54.746822 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 18:57:54.746828 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 18:57:54.746835 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 18:57:54.746841 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 18:57:54.746848 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 18:57:54.746854 kernel: ACPI: Interpreter enabled Oct 2 18:57:54.746861 kernel: ACPI: Using GIC for interrupt routing Oct 2 18:57:54.746867 kernel: ACPI: MCFG table detected, 1 entries Oct 2 18:57:54.746875 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Oct 2 18:57:54.746887 kernel: printk: console [ttyAMA0] enabled Oct 2 18:57:54.746894 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 18:57:54.747029 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 18:57:54.747093 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 2 18:57:54.747151 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 2 18:57:54.747225 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Oct 2 18:57:54.747294 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Oct 2 18:57:54.747303 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Oct 2 18:57:54.747313 kernel: PCI host bridge to bus 0000:00 Oct 2 18:57:54.747381 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Oct 2 18:57:54.747436 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 2 18:57:54.747491 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Oct 2 18:57:54.747543 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 18:57:54.747622 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Oct 2 18:57:54.747698 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 18:57:54.747758 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Oct 2 18:57:54.747816 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Oct 2 18:57:54.747874 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Oct 2 18:57:54.747967 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Oct 2 18:57:54.748029 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Oct 2 18:57:54.748092 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Oct 2 18:57:54.748145 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Oct 2 18:57:54.748215 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 2 18:57:54.748269 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Oct 2 18:57:54.748277 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 2 18:57:54.748284 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 2 18:57:54.748291 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 2 18:57:54.748298 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 2 18:57:54.748306 kernel: iommu: Default domain type: Translated Oct 2 18:57:54.748313 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 18:57:54.748319 kernel: vgaarb: loaded Oct 2 18:57:54.748326 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 18:57:54.748333 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 18:57:54.748339 kernel: PTP clock support registered Oct 2 18:57:54.748346 kernel: Registered efivars operations Oct 2 18:57:54.748352 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 18:57:54.748359 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 18:57:54.748367 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 18:57:54.748373 kernel: pnp: PnP ACPI init Oct 2 18:57:54.748438 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Oct 2 18:57:54.748447 kernel: pnp: PnP ACPI: found 1 devices Oct 2 18:57:54.748454 kernel: NET: Registered PF_INET protocol family Oct 2 18:57:54.748460 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 18:57:54.748467 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 18:57:54.748474 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 18:57:54.748482 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 18:57:54.748489 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 18:57:54.748495 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 18:57:54.748502 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 18:57:54.748508 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 18:57:54.748515 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 18:57:54.748521 kernel: PCI: CLS 0 bytes, default 64 Oct 2 18:57:54.748528 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Oct 2 18:57:54.748535 kernel: kvm [1]: HYP mode not available Oct 2 18:57:54.748543 kernel: Initialise system trusted keyrings Oct 2 18:57:54.748549 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 18:57:54.748556 kernel: Key type asymmetric registered Oct 2 18:57:54.748562 kernel: Asymmetric key parser 'x509' registered Oct 2 18:57:54.748569 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 18:57:54.748575 kernel: io scheduler mq-deadline registered Oct 2 18:57:54.748581 kernel: io scheduler kyber registered Oct 2 18:57:54.748588 kernel: io scheduler bfq registered Oct 2 18:57:54.748595 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 2 18:57:54.748603 kernel: ACPI: button: Power Button [PWRB] Oct 2 18:57:54.748609 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 2 18:57:54.748669 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Oct 2 18:57:54.748677 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 18:57:54.748684 kernel: thunder_xcv, ver 1.0 Oct 2 18:57:54.748691 kernel: thunder_bgx, ver 1.0 Oct 2 18:57:54.748697 kernel: nicpf, ver 1.0 Oct 2 18:57:54.748704 kernel: nicvf, ver 1.0 Oct 2 18:57:54.748767 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 18:57:54.748825 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T18:57:54 UTC (1696273074) Oct 2 18:57:54.748834 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 18:57:54.748841 kernel: NET: Registered PF_INET6 protocol family Oct 2 18:57:54.748847 kernel: Segment Routing with IPv6 Oct 2 18:57:54.748854 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 18:57:54.748860 kernel: NET: Registered PF_PACKET protocol family Oct 2 18:57:54.748867 kernel: Key type dns_resolver registered Oct 2 18:57:54.748873 kernel: registered taskstats version 1 Oct 2 18:57:54.748889 kernel: Loading compiled-in X.509 certificates Oct 2 18:57:54.748896 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 18:57:54.748903 kernel: Key type .fscrypt registered Oct 2 18:57:54.748909 kernel: Key type fscrypt-provisioning registered Oct 2 18:57:54.748916 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 18:57:54.748923 kernel: ima: Allocated hash algorithm: sha1 Oct 2 18:57:54.748929 kernel: ima: No architecture policies found Oct 2 18:57:54.748935 kernel: Freeing unused kernel memory: 34560K Oct 2 18:57:54.748942 kernel: Run /init as init process Oct 2 18:57:54.748950 kernel: with arguments: Oct 2 18:57:54.748957 kernel: /init Oct 2 18:57:54.748963 kernel: with environment: Oct 2 18:57:54.748969 kernel: HOME=/ Oct 2 18:57:54.748975 kernel: TERM=linux Oct 2 18:57:54.748982 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 18:57:54.748990 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 18:57:54.748999 systemd[1]: Detected virtualization kvm. Oct 2 18:57:54.749012 systemd[1]: Detected architecture arm64. Oct 2 18:57:54.749019 systemd[1]: Running in initrd. Oct 2 18:57:54.749026 systemd[1]: No hostname configured, using default hostname. Oct 2 18:57:54.749032 systemd[1]: Hostname set to . Oct 2 18:57:54.749040 systemd[1]: Initializing machine ID from VM UUID. Oct 2 18:57:54.749046 systemd[1]: Queued start job for default target initrd.target. Oct 2 18:57:54.749056 systemd[1]: Started systemd-ask-password-console.path. Oct 2 18:57:54.749063 systemd[1]: Reached target cryptsetup.target. Oct 2 18:57:54.749071 systemd[1]: Reached target paths.target. Oct 2 18:57:54.749078 systemd[1]: Reached target slices.target. Oct 2 18:57:54.749085 systemd[1]: Reached target swap.target. Oct 2 18:57:54.749092 systemd[1]: Reached target timers.target. Oct 2 18:57:54.749099 systemd[1]: Listening on iscsid.socket. Oct 2 18:57:54.749106 systemd[1]: Listening on iscsiuio.socket. Oct 2 18:57:54.749113 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 18:57:54.749122 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 18:57:54.749129 systemd[1]: Listening on systemd-journald.socket. Oct 2 18:57:54.749136 systemd[1]: Listening on systemd-networkd.socket. Oct 2 18:57:54.749143 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 18:57:54.749150 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 18:57:54.749157 systemd[1]: Reached target sockets.target. Oct 2 18:57:54.749172 systemd[1]: Starting kmod-static-nodes.service... Oct 2 18:57:54.749179 systemd[1]: Finished network-cleanup.service. Oct 2 18:57:54.749186 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 18:57:54.749195 systemd[1]: Starting systemd-journald.service... Oct 2 18:57:54.749202 systemd[1]: Starting systemd-modules-load.service... Oct 2 18:57:54.749209 systemd[1]: Starting systemd-resolved.service... Oct 2 18:57:54.749216 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 18:57:54.749223 systemd[1]: Finished kmod-static-nodes.service. Oct 2 18:57:54.749230 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 18:57:54.749237 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 18:57:54.749244 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 18:57:54.749251 kernel: audit: type=1130 audit(1696273074.747:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:54.749259 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 18:57:54.749269 systemd-journald[289]: Journal started Oct 2 18:57:54.749309 systemd-journald[289]: Runtime Journal (/run/log/journal/bdd37df1e6004c1e9556090e9fbb33bb) is 6.0M, max 48.7M, 42.6M free. Oct 2 18:57:54.747000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:54.741614 systemd-modules-load[290]: Inserted module 'overlay' Oct 2 18:57:54.755625 systemd[1]: Started systemd-journald.service. Oct 2 18:57:54.755658 kernel: audit: type=1130 audit(1696273074.752:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:54.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:54.755945 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 18:57:54.759954 kernel: audit: type=1130 audit(1696273074.756:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:54.759975 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 18:57:54.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:54.764634 systemd-modules-load[290]: Inserted module 'br_netfilter' Oct 2 18:57:54.765321 kernel: Bridge firewalling registered Oct 2 18:57:54.768890 systemd-resolved[291]: Positive Trust Anchors: Oct 2 18:57:54.768902 systemd-resolved[291]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 18:57:54.768929 systemd-resolved[291]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 18:57:54.773372 systemd-resolved[291]: Defaulting to hostname 'linux'. Oct 2 18:57:54.775000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:54.778191 kernel: audit: type=1130 audit(1696273074.775:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:54.778210 kernel: SCSI subsystem initialized Oct 2 18:57:54.774203 systemd[1]: Started systemd-resolved.service. Oct 2 18:57:54.775659 systemd[1]: Reached target nss-lookup.target. Oct 2 18:57:54.784202 kernel: audit: type=1130 audit(1696273074.779:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:54.779000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:54.778891 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 18:57:54.786663 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 18:57:54.786681 kernel: device-mapper: uevent: version 1.0.3 Oct 2 18:57:54.786690 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 18:57:54.780569 systemd[1]: Starting dracut-cmdline.service... Oct 2 18:57:54.789866 systemd-modules-load[290]: Inserted module 'dm_multipath' Oct 2 18:57:54.790732 systemd[1]: Finished systemd-modules-load.service. Oct 2 18:57:54.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:54.792125 systemd[1]: Starting systemd-sysctl.service... Oct 2 18:57:54.794613 kernel: audit: type=1130 audit(1696273074.791:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:54.795452 dracut-cmdline[306]: dracut-dracut-053 Oct 2 18:57:54.798367 dracut-cmdline[306]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 18:57:54.803035 systemd[1]: Finished systemd-sysctl.service. Oct 2 18:57:54.803000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:54.806190 kernel: audit: type=1130 audit(1696273074.803:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:54.868186 kernel: Loading iSCSI transport class v2.0-870. Oct 2 18:57:54.876188 kernel: iscsi: registered transport (tcp) Oct 2 18:57:54.891187 kernel: iscsi: registered transport (qla4xxx) Oct 2 18:57:54.891213 kernel: QLogic iSCSI HBA Driver Oct 2 18:57:54.936960 systemd[1]: Finished dracut-cmdline.service. Oct 2 18:57:54.937000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:54.938436 systemd[1]: Starting dracut-pre-udev.service... Oct 2 18:57:54.940652 kernel: audit: type=1130 audit(1696273074.937:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:54.985190 kernel: raid6: neonx8 gen() 13749 MB/s Oct 2 18:57:55.002188 kernel: raid6: neonx8 xor() 10826 MB/s Oct 2 18:57:55.019181 kernel: raid6: neonx4 gen() 13527 MB/s Oct 2 18:57:55.036192 kernel: raid6: neonx4 xor() 11315 MB/s Oct 2 18:57:55.053183 kernel: raid6: neonx2 gen() 12987 MB/s Oct 2 18:57:55.070183 kernel: raid6: neonx2 xor() 10239 MB/s Oct 2 18:57:55.087180 kernel: raid6: neonx1 gen() 10511 MB/s Oct 2 18:57:55.104207 kernel: raid6: neonx1 xor() 8770 MB/s Oct 2 18:57:55.121181 kernel: raid6: int64x8 gen() 6294 MB/s Oct 2 18:57:55.138192 kernel: raid6: int64x8 xor() 3548 MB/s Oct 2 18:57:55.155188 kernel: raid6: int64x4 gen() 7268 MB/s Oct 2 18:57:55.172189 kernel: raid6: int64x4 xor() 3858 MB/s Oct 2 18:57:55.189183 kernel: raid6: int64x2 gen() 6150 MB/s Oct 2 18:57:55.206187 kernel: raid6: int64x2 xor() 3321 MB/s Oct 2 18:57:55.223191 kernel: raid6: int64x1 gen() 5043 MB/s Oct 2 18:57:55.240338 kernel: raid6: int64x1 xor() 2643 MB/s Oct 2 18:57:55.240378 kernel: raid6: using algorithm neonx8 gen() 13749 MB/s Oct 2 18:57:55.240396 kernel: raid6: .... xor() 10826 MB/s, rmw enabled Oct 2 18:57:55.240412 kernel: raid6: using neon recovery algorithm Oct 2 18:57:55.251290 kernel: xor: measuring software checksum speed Oct 2 18:57:55.251315 kernel: 8regs : 17282 MB/sec Oct 2 18:57:55.252178 kernel: 32regs : 20760 MB/sec Oct 2 18:57:55.253214 kernel: arm64_neon : 27845 MB/sec Oct 2 18:57:55.253226 kernel: xor: using function: arm64_neon (27845 MB/sec) Oct 2 18:57:55.308194 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 18:57:55.321126 systemd[1]: Finished dracut-pre-udev.service. Oct 2 18:57:55.321000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:55.323000 audit: BPF prog-id=7 op=LOAD Oct 2 18:57:55.323000 audit: BPF prog-id=8 op=LOAD Oct 2 18:57:55.324182 kernel: audit: type=1130 audit(1696273075.321:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:55.324391 systemd[1]: Starting systemd-udevd.service... Oct 2 18:57:55.338976 systemd-udevd[488]: Using default interface naming scheme 'v252'. Oct 2 18:57:55.342253 systemd[1]: Started systemd-udevd.service. Oct 2 18:57:55.342000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:55.344266 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 18:57:55.357696 dracut-pre-trigger[495]: rd.md=0: removing MD RAID activation Oct 2 18:57:55.390301 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 18:57:55.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:55.391675 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 18:57:55.430041 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 18:57:55.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:55.457947 kernel: virtio_blk virtio1: [vda] 9289728 512-byte logical blocks (4.76 GB/4.43 GiB) Oct 2 18:57:55.463185 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 18:57:55.475182 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (542) Oct 2 18:57:55.479014 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 18:57:55.483841 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 18:57:55.484675 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 18:57:55.488635 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 18:57:55.491953 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 18:57:55.493540 systemd[1]: Starting disk-uuid.service... Oct 2 18:57:55.501186 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 18:57:56.515950 disk-uuid[562]: The operation has completed successfully. Oct 2 18:57:56.516885 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 18:57:56.539681 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 18:57:56.540000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:56.540000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:56.539776 systemd[1]: Finished disk-uuid.service. Oct 2 18:57:56.541194 systemd[1]: Starting verity-setup.service... Oct 2 18:57:56.557197 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 18:57:56.579674 systemd[1]: Found device dev-mapper-usr.device. Oct 2 18:57:56.581288 systemd[1]: Mounting sysusr-usr.mount... Oct 2 18:57:56.584577 systemd[1]: Finished verity-setup.service. Oct 2 18:57:56.584000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:56.631100 systemd[1]: Mounted sysusr-usr.mount. Oct 2 18:57:56.632087 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 18:57:56.631757 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 18:57:56.632488 systemd[1]: Starting ignition-setup.service... Oct 2 18:57:56.634084 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 18:57:56.642596 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 18:57:56.642642 kernel: BTRFS info (device vda6): using free space tree Oct 2 18:57:56.642652 kernel: BTRFS info (device vda6): has skinny extents Oct 2 18:57:56.652712 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 18:57:56.660496 systemd[1]: Finished ignition-setup.service. Oct 2 18:57:56.660000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:56.661863 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 18:57:56.734351 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 18:57:56.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:56.736000 audit: BPF prog-id=9 op=LOAD Oct 2 18:57:56.736901 systemd[1]: Starting systemd-networkd.service... Oct 2 18:57:56.738602 ignition[647]: Ignition 2.14.0 Oct 2 18:57:56.738608 ignition[647]: Stage: fetch-offline Oct 2 18:57:56.738644 ignition[647]: no configs at "/usr/lib/ignition/base.d" Oct 2 18:57:56.738657 ignition[647]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 18:57:56.738810 ignition[647]: parsed url from cmdline: "" Oct 2 18:57:56.738813 ignition[647]: no config URL provided Oct 2 18:57:56.738818 ignition[647]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 18:57:56.738826 ignition[647]: no config at "/usr/lib/ignition/user.ign" Oct 2 18:57:56.738843 ignition[647]: op(1): [started] loading QEMU firmware config module Oct 2 18:57:56.738847 ignition[647]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 2 18:57:56.746514 ignition[647]: op(1): [finished] loading QEMU firmware config module Oct 2 18:57:56.760761 systemd-networkd[738]: lo: Link UP Oct 2 18:57:56.760773 systemd-networkd[738]: lo: Gained carrier Oct 2 18:57:56.761137 systemd-networkd[738]: Enumeration completed Oct 2 18:57:56.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:56.761229 systemd[1]: Started systemd-networkd.service. Oct 2 18:57:56.762233 systemd[1]: Reached target network.target. Oct 2 18:57:56.763977 systemd[1]: Starting iscsiuio.service... Oct 2 18:57:56.765333 systemd-networkd[738]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 18:57:56.766421 systemd-networkd[738]: eth0: Link UP Oct 2 18:57:56.766424 systemd-networkd[738]: eth0: Gained carrier Oct 2 18:57:56.769637 ignition[647]: parsing config with SHA512: fe96b6ea4bdaf2509520a992c27eabd3fda56f3e97320b72e8e85b206737f272e6c27e2452e81f6e9c3fb8a6c4c6e18762e617be05408d2046016a3ddf0c9d1d Oct 2 18:57:56.774230 systemd[1]: Started iscsiuio.service. Oct 2 18:57:56.774000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:56.775700 systemd[1]: Starting iscsid.service... Oct 2 18:57:56.780138 iscsid[745]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 18:57:56.780138 iscsid[745]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 18:57:56.780138 iscsid[745]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 18:57:56.780138 iscsid[745]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 18:57:56.780138 iscsid[745]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 18:57:56.780138 iscsid[745]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 18:57:56.784000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:56.783726 systemd[1]: Started iscsid.service. Oct 2 18:57:56.785730 systemd[1]: Starting dracut-initqueue.service... Oct 2 18:57:56.786035 systemd-networkd[738]: eth0: DHCPv4 address 10.0.0.73/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 18:57:56.799607 systemd[1]: Finished dracut-initqueue.service. Oct 2 18:57:56.800000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:56.800268 systemd[1]: Reached target remote-fs-pre.target. Oct 2 18:57:56.801303 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 18:57:56.801492 unknown[647]: fetched base config from "system" Oct 2 18:57:56.801912 ignition[647]: fetch-offline: fetch-offline passed Oct 2 18:57:56.801499 unknown[647]: fetched user config from "qemu" Oct 2 18:57:56.801972 ignition[647]: Ignition finished successfully Oct 2 18:57:56.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:56.802299 systemd[1]: Reached target remote-fs.target. Oct 2 18:57:56.803882 systemd[1]: Starting dracut-pre-mount.service... Oct 2 18:57:56.804889 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 18:57:56.805831 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 2 18:57:56.806475 systemd[1]: Starting ignition-kargs.service... Oct 2 18:57:56.814848 systemd[1]: Finished dracut-pre-mount.service. Oct 2 18:57:56.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:56.816893 ignition[755]: Ignition 2.14.0 Oct 2 18:57:56.816903 ignition[755]: Stage: kargs Oct 2 18:57:56.817000 ignition[755]: no configs at "/usr/lib/ignition/base.d" Oct 2 18:57:56.817009 ignition[755]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 18:57:56.818941 systemd[1]: Finished ignition-kargs.service. Oct 2 18:57:56.820000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:56.817829 ignition[755]: kargs: kargs passed Oct 2 18:57:56.817885 ignition[755]: Ignition finished successfully Oct 2 18:57:56.821450 systemd[1]: Starting ignition-disks.service... Oct 2 18:57:56.829059 ignition[765]: Ignition 2.14.0 Oct 2 18:57:56.829074 ignition[765]: Stage: disks Oct 2 18:57:56.829192 ignition[765]: no configs at "/usr/lib/ignition/base.d" Oct 2 18:57:56.829203 ignition[765]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 18:57:56.831439 systemd[1]: Finished ignition-disks.service. Oct 2 18:57:56.832000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:56.830155 ignition[765]: disks: disks passed Oct 2 18:57:56.832612 systemd[1]: Reached target initrd-root-device.target. Oct 2 18:57:56.830214 ignition[765]: Ignition finished successfully Oct 2 18:57:56.833568 systemd[1]: Reached target local-fs-pre.target. Oct 2 18:57:56.834438 systemd[1]: Reached target local-fs.target. Oct 2 18:57:56.835399 systemd[1]: Reached target sysinit.target. Oct 2 18:57:56.836274 systemd[1]: Reached target basic.target. Oct 2 18:57:56.837988 systemd[1]: Starting systemd-fsck-root.service... Oct 2 18:57:56.853564 systemd-fsck[773]: ROOT: clean, 603/553520 files, 56011/553472 blocks Oct 2 18:57:56.860378 systemd[1]: Finished systemd-fsck-root.service. Oct 2 18:57:56.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:56.861859 systemd[1]: Mounting sysroot.mount... Oct 2 18:57:56.867183 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 18:57:56.867412 systemd[1]: Mounted sysroot.mount. Oct 2 18:57:56.867954 systemd[1]: Reached target initrd-root-fs.target. Oct 2 18:57:56.869883 systemd[1]: Mounting sysroot-usr.mount... Oct 2 18:57:56.870631 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 18:57:56.870666 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 18:57:56.870686 systemd[1]: Reached target ignition-diskful.target. Oct 2 18:57:56.873046 systemd[1]: Mounted sysroot-usr.mount. Oct 2 18:57:56.874459 systemd[1]: Starting initrd-setup-root.service... Oct 2 18:57:56.880518 initrd-setup-root[783]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 18:57:56.885524 initrd-setup-root[791]: cut: /sysroot/etc/group: No such file or directory Oct 2 18:57:56.890287 initrd-setup-root[799]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 18:57:56.894867 initrd-setup-root[807]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 18:57:56.924942 systemd[1]: Finished initrd-setup-root.service. Oct 2 18:57:56.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:56.926366 systemd[1]: Starting ignition-mount.service... Oct 2 18:57:56.927510 systemd[1]: Starting sysroot-boot.service... Oct 2 18:57:56.933007 bash[824]: umount: /sysroot/usr/share/oem: not mounted. Oct 2 18:57:56.943852 ignition[826]: INFO : Ignition 2.14.0 Oct 2 18:57:56.943852 ignition[826]: INFO : Stage: mount Oct 2 18:57:56.945376 ignition[826]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 18:57:56.945376 ignition[826]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 18:57:56.945376 ignition[826]: INFO : mount: mount passed Oct 2 18:57:56.945376 ignition[826]: INFO : Ignition finished successfully Oct 2 18:57:56.948000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:56.947422 systemd[1]: Finished sysroot-boot.service. Oct 2 18:57:56.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:56.948422 systemd[1]: Finished ignition-mount.service. Oct 2 18:57:57.591263 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 18:57:57.598322 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (835) Oct 2 18:57:57.598357 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 18:57:57.598375 kernel: BTRFS info (device vda6): using free space tree Oct 2 18:57:57.599182 kernel: BTRFS info (device vda6): has skinny extents Oct 2 18:57:57.602242 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 18:57:57.603645 systemd[1]: Starting ignition-files.service... Oct 2 18:57:57.619432 ignition[855]: INFO : Ignition 2.14.0 Oct 2 18:57:57.619432 ignition[855]: INFO : Stage: files Oct 2 18:57:57.620670 ignition[855]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 18:57:57.620670 ignition[855]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 18:57:57.620670 ignition[855]: DEBUG : files: compiled without relabeling support, skipping Oct 2 18:57:57.624683 ignition[855]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 18:57:57.624683 ignition[855]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 18:57:57.626999 ignition[855]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 18:57:57.626999 ignition[855]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 18:57:57.628995 ignition[855]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 18:57:57.628995 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 18:57:57.628995 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Oct 2 18:57:57.627333 unknown[855]: wrote ssh authorized keys file for user: core Oct 2 18:57:57.799735 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 18:57:58.055305 ignition[855]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Oct 2 18:57:58.055305 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 18:57:58.058640 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 18:57:58.058640 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Oct 2 18:57:58.060265 systemd-networkd[738]: eth0: Gained IPv6LL Oct 2 18:57:58.198389 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 18:57:58.384544 ignition[855]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Oct 2 18:57:58.386692 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 18:57:58.386692 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 18:57:58.386692 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubeadm: attempt #1 Oct 2 18:57:58.440746 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 18:57:58.946276 ignition[855]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 45b3100984c979ba0f1c0df8f4211474c2d75ebe916e677dff5fc8e3b3697cf7a953da94e356f39684cc860dff6878b772b7514c55651c2f866d9efeef23f970 Oct 2 18:57:58.948417 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 18:57:58.948417 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 18:57:58.948417 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubelet: attempt #1 Oct 2 18:57:58.997536 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 18:57:59.922550 ignition[855]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 71857ff499ae135fa478e1827a0ed8865e578a8d2b1e25876e914fd0beba03733801c0654bcd4c0567bafeb16887dafb2dbbe8d1116e6ea28dcd8366c142d348 Oct 2 18:57:59.922550 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 18:57:59.925822 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/install.sh" Oct 2 18:57:59.925822 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 18:57:59.925822 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 18:57:59.925822 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 18:57:59.925822 ignition[855]: INFO : files: op(9): [started] processing unit "prepare-cni-plugins.service" Oct 2 18:57:59.925822 ignition[855]: INFO : files: op(9): op(a): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 18:57:59.925822 ignition[855]: INFO : files: op(9): op(a): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 18:57:59.925822 ignition[855]: INFO : files: op(9): [finished] processing unit "prepare-cni-plugins.service" Oct 2 18:57:59.925822 ignition[855]: INFO : files: op(b): [started] processing unit "prepare-critools.service" Oct 2 18:57:59.925822 ignition[855]: INFO : files: op(b): op(c): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 18:57:59.925822 ignition[855]: INFO : files: op(b): op(c): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 18:57:59.925822 ignition[855]: INFO : files: op(b): [finished] processing unit "prepare-critools.service" Oct 2 18:57:59.925822 ignition[855]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Oct 2 18:57:59.925822 ignition[855]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 18:57:59.925822 ignition[855]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 18:57:59.925822 ignition[855]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Oct 2 18:57:59.925822 ignition[855]: INFO : files: op(f): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 18:57:59.949552 ignition[855]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 18:57:59.949552 ignition[855]: INFO : files: op(10): [started] setting preset to enabled for "prepare-critools.service" Oct 2 18:57:59.949552 ignition[855]: INFO : files: op(10): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 18:57:59.949552 ignition[855]: INFO : files: op(11): [started] setting preset to disabled for "coreos-metadata.service" Oct 2 18:57:59.949552 ignition[855]: INFO : files: op(11): op(12): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 18:57:59.980121 ignition[855]: INFO : files: op(11): op(12): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 18:57:59.981295 ignition[855]: INFO : files: op(11): [finished] setting preset to disabled for "coreos-metadata.service" Oct 2 18:57:59.982390 ignition[855]: INFO : files: createResultFile: createFiles: op(13): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 18:57:59.983658 ignition[855]: INFO : files: createResultFile: createFiles: op(13): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 18:57:59.984928 ignition[855]: INFO : files: files passed Oct 2 18:57:59.984928 ignition[855]: INFO : Ignition finished successfully Oct 2 18:57:59.987108 systemd[1]: Finished ignition-files.service. Oct 2 18:57:59.990714 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 18:57:59.990734 kernel: audit: type=1130 audit(1696273079.987:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:59.987000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:59.989144 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 18:57:59.991265 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 18:57:59.991965 systemd[1]: Starting ignition-quench.service... Oct 2 18:57:59.995173 initrd-setup-root-after-ignition[880]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 2 18:57:59.997487 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 18:57:59.997578 systemd[1]: Finished ignition-quench.service. Oct 2 18:58:00.002963 kernel: audit: type=1130 audit(1696273079.998:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.002985 kernel: audit: type=1131 audit(1696273079.998:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:59.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:57:59.998000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.003052 initrd-setup-root-after-ignition[883]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 18:58:00.003142 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 18:58:00.004937 systemd[1]: Reached target ignition-complete.target. Oct 2 18:58:00.004000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.007310 systemd[1]: Starting initrd-parse-etc.service... Oct 2 18:58:00.009761 kernel: audit: type=1130 audit(1696273080.004:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.022343 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 18:58:00.022440 systemd[1]: Finished initrd-parse-etc.service. Oct 2 18:58:00.027275 kernel: audit: type=1130 audit(1696273080.023:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.027296 kernel: audit: type=1131 audit(1696273080.023:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.023000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.023000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.023679 systemd[1]: Reached target initrd-fs.target. Oct 2 18:58:00.027767 systemd[1]: Reached target initrd.target. Oct 2 18:58:00.028746 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 18:58:00.029492 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 18:58:00.041657 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 18:58:00.042000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.043010 systemd[1]: Starting initrd-cleanup.service... Oct 2 18:58:00.045209 kernel: audit: type=1130 audit(1696273080.042:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.052029 systemd[1]: Stopped target nss-lookup.target. Oct 2 18:58:00.052707 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 18:58:00.053711 systemd[1]: Stopped target timers.target. Oct 2 18:58:00.054665 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 18:58:00.055000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.054772 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 18:58:00.058740 kernel: audit: type=1131 audit(1696273080.055:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.055714 systemd[1]: Stopped target initrd.target. Oct 2 18:58:00.058374 systemd[1]: Stopped target basic.target. Oct 2 18:58:00.059239 systemd[1]: Stopped target ignition-complete.target. Oct 2 18:58:00.060170 systemd[1]: Stopped target ignition-diskful.target. Oct 2 18:58:00.061072 systemd[1]: Stopped target initrd-root-device.target. Oct 2 18:58:00.062151 systemd[1]: Stopped target remote-fs.target. Oct 2 18:58:00.063103 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 18:58:00.064100 systemd[1]: Stopped target sysinit.target. Oct 2 18:58:00.064992 systemd[1]: Stopped target local-fs.target. Oct 2 18:58:00.066002 systemd[1]: Stopped target local-fs-pre.target. Oct 2 18:58:00.067012 systemd[1]: Stopped target swap.target. Oct 2 18:58:00.068000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.067826 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 18:58:00.071813 kernel: audit: type=1131 audit(1696273080.068:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.067944 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 18:58:00.072000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.068846 systemd[1]: Stopped target cryptsetup.target. Oct 2 18:58:00.075273 kernel: audit: type=1131 audit(1696273080.072:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.074000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.071227 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 18:58:00.071325 systemd[1]: Stopped dracut-initqueue.service. Oct 2 18:58:00.072428 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 18:58:00.072519 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 18:58:00.074967 systemd[1]: Stopped target paths.target. Oct 2 18:58:00.075752 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 18:58:00.079230 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 18:58:00.079923 systemd[1]: Stopped target slices.target. Oct 2 18:58:00.080863 systemd[1]: Stopped target sockets.target. Oct 2 18:58:00.081740 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 18:58:00.081814 systemd[1]: Closed iscsid.socket. Oct 2 18:58:00.083000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.082653 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 18:58:00.084000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.082754 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 18:58:00.083752 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 18:58:00.083839 systemd[1]: Stopped ignition-files.service. Oct 2 18:58:00.085419 systemd[1]: Stopping ignition-mount.service... Oct 2 18:58:00.086367 systemd[1]: Stopping iscsiuio.service... Oct 2 18:58:00.087106 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 18:58:00.087000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.087225 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 18:58:00.090000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.088905 systemd[1]: Stopping sysroot-boot.service... Oct 2 18:58:00.091000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.089469 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 18:58:00.089588 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 18:58:00.090682 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 18:58:00.093000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.090777 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 18:58:00.095233 ignition[896]: INFO : Ignition 2.14.0 Oct 2 18:58:00.095233 ignition[896]: INFO : Stage: umount Oct 2 18:58:00.095233 ignition[896]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 18:58:00.095233 ignition[896]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 18:58:00.098000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.098000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.093106 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 18:58:00.099000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.100849 ignition[896]: INFO : umount: umount passed Oct 2 18:58:00.100849 ignition[896]: INFO : Ignition finished successfully Oct 2 18:58:00.101000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.102000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.102000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.093237 systemd[1]: Stopped iscsiuio.service. Oct 2 18:58:00.094134 systemd[1]: Stopped target network.target. Oct 2 18:58:00.094847 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 18:58:00.103000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.105000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.094884 systemd[1]: Closed iscsiuio.socket. Oct 2 18:58:00.095775 systemd[1]: Stopping systemd-networkd.service... Oct 2 18:58:00.096699 systemd[1]: Stopping systemd-resolved.service... Oct 2 18:58:00.097869 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 18:58:00.109000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.111000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.097957 systemd[1]: Finished initrd-cleanup.service. Oct 2 18:58:00.112000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.113000 audit: BPF prog-id=6 op=UNLOAD Oct 2 18:58:00.098943 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 18:58:00.099020 systemd[1]: Stopped ignition-mount.service. Oct 2 18:58:00.100704 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 18:58:00.100749 systemd[1]: Stopped ignition-disks.service. Oct 2 18:58:00.101223 systemd-networkd[738]: eth0: DHCPv6 lease lost Oct 2 18:58:00.118000 audit: BPF prog-id=9 op=UNLOAD Oct 2 18:58:00.101383 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 18:58:00.101419 systemd[1]: Stopped ignition-kargs.service. Oct 2 18:58:00.102325 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 18:58:00.102357 systemd[1]: Stopped ignition-setup.service. Oct 2 18:58:00.103040 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 18:58:00.122000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.103125 systemd[1]: Stopped systemd-networkd.service. Oct 2 18:58:00.125000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.104328 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 18:58:00.104409 systemd[1]: Stopped systemd-resolved.service. Oct 2 18:58:00.129000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.105570 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 18:58:00.105597 systemd[1]: Closed systemd-networkd.socket. Oct 2 18:58:00.107223 systemd[1]: Stopping network-cleanup.service... Oct 2 18:58:00.132000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.108736 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 18:58:00.134000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.108789 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 18:58:00.110039 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 18:58:00.110078 systemd[1]: Stopped systemd-sysctl.service. Oct 2 18:58:00.111882 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 18:58:00.139000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.111925 systemd[1]: Stopped systemd-modules-load.service. Oct 2 18:58:00.112999 systemd[1]: Stopping systemd-udevd.service... Oct 2 18:58:00.117927 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 18:58:00.118013 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 18:58:00.122226 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 18:58:00.144000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.144000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.122321 systemd[1]: Stopped network-cleanup.service. Oct 2 18:58:00.123268 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 18:58:00.123376 systemd[1]: Stopped systemd-udevd.service. Oct 2 18:58:00.125574 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 18:58:00.125605 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 18:58:00.126208 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 18:58:00.126235 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 18:58:00.128088 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 18:58:00.128133 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 18:58:00.129832 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 18:58:00.129882 systemd[1]: Stopped dracut-cmdline.service. Oct 2 18:58:00.132677 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 18:58:00.132719 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 18:58:00.135122 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 18:58:00.137423 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 18:58:00.137481 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 18:58:00.142580 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 18:58:00.142667 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 18:58:00.176834 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 18:58:00.176937 systemd[1]: Stopped sysroot-boot.service. Oct 2 18:58:00.177000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.178193 systemd[1]: Reached target initrd-switch-root.target. Oct 2 18:58:00.179084 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 18:58:00.180000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.179132 systemd[1]: Stopped initrd-setup-root.service. Oct 2 18:58:00.180948 systemd[1]: Starting initrd-switch-root.service... Oct 2 18:58:00.188266 systemd[1]: Switching root. Oct 2 18:58:00.205641 iscsid[745]: iscsid shutting down. Oct 2 18:58:00.206134 systemd-journald[289]: Journal stopped Oct 2 18:58:02.353808 systemd-journald[289]: Received SIGTERM from PID 1 (systemd). Oct 2 18:58:02.353920 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 18:58:02.353933 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 18:58:02.353954 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 18:58:02.353974 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 18:58:02.353984 kernel: SELinux: policy capability open_perms=1 Oct 2 18:58:02.353994 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 18:58:02.354003 kernel: SELinux: policy capability always_check_network=0 Oct 2 18:58:02.354016 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 18:58:02.354026 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 18:58:02.354035 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 18:58:02.354054 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 18:58:02.354073 systemd[1]: Successfully loaded SELinux policy in 32.492ms. Oct 2 18:58:02.354087 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 7.141ms. Oct 2 18:58:02.354099 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 18:58:02.354110 systemd[1]: Detected virtualization kvm. Oct 2 18:58:02.354122 systemd[1]: Detected architecture arm64. Oct 2 18:58:02.354133 systemd[1]: Detected first boot. Oct 2 18:58:02.354144 systemd[1]: Initializing machine ID from VM UUID. Oct 2 18:58:02.354156 systemd[1]: Populated /etc with preset unit settings. Oct 2 18:58:02.354184 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 18:58:02.354198 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 18:58:02.354210 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 18:58:02.354222 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 18:58:02.354232 systemd[1]: Stopped iscsid.service. Oct 2 18:58:02.354243 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 18:58:02.354254 systemd[1]: Stopped initrd-switch-root.service. Oct 2 18:58:02.354268 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 18:58:02.354280 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 18:58:02.354291 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 18:58:02.354301 systemd[1]: Created slice system-getty.slice. Oct 2 18:58:02.354311 systemd[1]: Created slice system-modprobe.slice. Oct 2 18:58:02.354322 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 18:58:02.354332 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 18:58:02.354344 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 18:58:02.354354 systemd[1]: Created slice user.slice. Oct 2 18:58:02.354366 systemd[1]: Started systemd-ask-password-console.path. Oct 2 18:58:02.354376 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 18:58:02.354387 systemd[1]: Set up automount boot.automount. Oct 2 18:58:02.354397 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 18:58:02.354408 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 18:58:02.354418 systemd[1]: Stopped target initrd-fs.target. Oct 2 18:58:02.354428 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 18:58:02.354438 systemd[1]: Reached target integritysetup.target. Oct 2 18:58:02.354449 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 18:58:02.354460 systemd[1]: Reached target remote-fs.target. Oct 2 18:58:02.354470 systemd[1]: Reached target slices.target. Oct 2 18:58:02.354480 systemd[1]: Reached target swap.target. Oct 2 18:58:02.354491 systemd[1]: Reached target torcx.target. Oct 2 18:58:02.354501 systemd[1]: Reached target veritysetup.target. Oct 2 18:58:02.354511 systemd[1]: Listening on systemd-coredump.socket. Oct 2 18:58:02.354522 systemd[1]: Listening on systemd-initctl.socket. Oct 2 18:58:02.354540 systemd[1]: Listening on systemd-networkd.socket. Oct 2 18:58:02.354551 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 18:58:02.354563 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 18:58:02.354573 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 18:58:02.354584 systemd[1]: Mounting dev-hugepages.mount... Oct 2 18:58:02.354594 systemd[1]: Mounting dev-mqueue.mount... Oct 2 18:58:02.354604 systemd[1]: Mounting media.mount... Oct 2 18:58:02.354615 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 18:58:02.354625 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 18:58:02.354635 systemd[1]: Mounting tmp.mount... Oct 2 18:58:02.354646 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 18:58:02.354658 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 18:58:02.354669 systemd[1]: Starting kmod-static-nodes.service... Oct 2 18:58:02.354679 systemd[1]: Starting modprobe@configfs.service... Oct 2 18:58:02.354690 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 18:58:02.354700 systemd[1]: Starting modprobe@drm.service... Oct 2 18:58:02.354711 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 18:58:02.354722 systemd[1]: Starting modprobe@fuse.service... Oct 2 18:58:02.354732 systemd[1]: Starting modprobe@loop.service... Oct 2 18:58:02.354743 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 18:58:02.354755 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 18:58:02.354765 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 18:58:02.354776 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 18:58:02.354787 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 18:58:02.354797 systemd[1]: Stopped systemd-journald.service. Oct 2 18:58:02.354807 kernel: fuse: init (API version 7.34) Oct 2 18:58:02.354817 kernel: loop: module loaded Oct 2 18:58:02.354827 systemd[1]: Starting systemd-journald.service... Oct 2 18:58:02.354837 systemd[1]: Starting systemd-modules-load.service... Oct 2 18:58:02.354856 systemd[1]: Starting systemd-network-generator.service... Oct 2 18:58:02.354869 systemd[1]: Starting systemd-remount-fs.service... Oct 2 18:58:02.354880 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 18:58:02.354891 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 18:58:02.354901 systemd[1]: Stopped verity-setup.service. Oct 2 18:58:02.354912 systemd[1]: Mounted dev-hugepages.mount. Oct 2 18:58:02.354922 systemd[1]: Mounted dev-mqueue.mount. Oct 2 18:58:02.354932 systemd[1]: Mounted media.mount. Oct 2 18:58:02.354943 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 18:58:02.354956 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 18:58:02.354967 systemd[1]: Mounted tmp.mount. Oct 2 18:58:02.354978 systemd[1]: Finished kmod-static-nodes.service. Oct 2 18:58:02.354988 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 18:58:02.354998 systemd[1]: Finished modprobe@configfs.service. Oct 2 18:58:02.355008 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 18:58:02.355019 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 18:58:02.355031 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 18:58:02.355041 systemd[1]: Finished modprobe@drm.service. Oct 2 18:58:02.355051 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 18:58:02.355062 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 18:58:02.355072 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 18:58:02.355082 systemd[1]: Finished modprobe@fuse.service. Oct 2 18:58:02.355093 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 18:58:02.355104 systemd[1]: Finished modprobe@loop.service. Oct 2 18:58:02.355117 systemd-journald[994]: Journal started Oct 2 18:58:02.355159 systemd-journald[994]: Runtime Journal (/run/log/journal/bdd37df1e6004c1e9556090e9fbb33bb) is 6.0M, max 48.7M, 42.6M free. Oct 2 18:58:00.272000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 18:58:00.442000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 18:58:00.442000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 18:58:00.442000 audit: BPF prog-id=10 op=LOAD Oct 2 18:58:00.442000 audit: BPF prog-id=10 op=UNLOAD Oct 2 18:58:00.442000 audit: BPF prog-id=11 op=LOAD Oct 2 18:58:00.442000 audit: BPF prog-id=11 op=UNLOAD Oct 2 18:58:02.231000 audit: BPF prog-id=12 op=LOAD Oct 2 18:58:02.231000 audit: BPF prog-id=3 op=UNLOAD Oct 2 18:58:02.232000 audit: BPF prog-id=13 op=LOAD Oct 2 18:58:02.232000 audit: BPF prog-id=14 op=LOAD Oct 2 18:58:02.232000 audit: BPF prog-id=4 op=UNLOAD Oct 2 18:58:02.232000 audit: BPF prog-id=5 op=UNLOAD Oct 2 18:58:02.233000 audit: BPF prog-id=15 op=LOAD Oct 2 18:58:02.233000 audit: BPF prog-id=12 op=UNLOAD Oct 2 18:58:02.234000 audit: BPF prog-id=16 op=LOAD Oct 2 18:58:02.234000 audit: BPF prog-id=17 op=LOAD Oct 2 18:58:02.234000 audit: BPF prog-id=13 op=UNLOAD Oct 2 18:58:02.234000 audit: BPF prog-id=14 op=UNLOAD Oct 2 18:58:02.234000 audit: BPF prog-id=18 op=LOAD Oct 2 18:58:02.234000 audit: BPF prog-id=15 op=UNLOAD Oct 2 18:58:02.235000 audit: BPF prog-id=19 op=LOAD Oct 2 18:58:02.235000 audit: BPF prog-id=20 op=LOAD Oct 2 18:58:02.235000 audit: BPF prog-id=16 op=UNLOAD Oct 2 18:58:02.235000 audit: BPF prog-id=17 op=UNLOAD Oct 2 18:58:02.236000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.238000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.240000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.240000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.247000 audit: BPF prog-id=18 op=UNLOAD Oct 2 18:58:02.312000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.313000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.315000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.317000 audit: BPF prog-id=21 op=LOAD Oct 2 18:58:02.318000 audit: BPF prog-id=22 op=LOAD Oct 2 18:58:02.319000 audit: BPF prog-id=23 op=LOAD Oct 2 18:58:02.319000 audit: BPF prog-id=19 op=UNLOAD Oct 2 18:58:02.319000 audit: BPF prog-id=20 op=UNLOAD Oct 2 18:58:02.332000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.342000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.344000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.344000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.346000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.346000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.348000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.351000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.351000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.352000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 18:58:02.352000 audit[994]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=4 a1=fffff5bbf540 a2=4000 a3=1 items=0 ppid=1 pid=994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:02.352000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 18:58:02.353000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.353000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.356000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.356000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.488267 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2023-10-02T18:58:00Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 18:58:02.230338 systemd[1]: Queued start job for default target multi-user.target. Oct 2 18:58:00.488778 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2023-10-02T18:58:00Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 18:58:02.230352 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 18:58:00.488797 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2023-10-02T18:58:00Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 18:58:02.236218 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 18:58:00.488828 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2023-10-02T18:58:00Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 18:58:00.488838 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2023-10-02T18:58:00Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 18:58:00.488878 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2023-10-02T18:58:00Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 18:58:00.488891 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2023-10-02T18:58:00Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 18:58:00.489095 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2023-10-02T18:58:00Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 18:58:00.489129 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2023-10-02T18:58:00Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 18:58:00.489140 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2023-10-02T18:58:00Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 18:58:02.357240 systemd[1]: Started systemd-journald.service. Oct 2 18:58:00.489579 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2023-10-02T18:58:00Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 18:58:02.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:00.489616 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2023-10-02T18:58:00Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 18:58:00.489635 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2023-10-02T18:58:00Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 18:58:00.489648 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2023-10-02T18:58:00Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 18:58:00.489665 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2023-10-02T18:58:00Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 18:58:00.489677 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2023-10-02T18:58:00Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 18:58:01.948919 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2023-10-02T18:58:01Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 18:58:01.949208 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2023-10-02T18:58:01Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 18:58:01.949299 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2023-10-02T18:58:01Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 18:58:02.357866 systemd[1]: Finished systemd-modules-load.service. Oct 2 18:58:01.949455 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2023-10-02T18:58:01Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 18:58:01.949505 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2023-10-02T18:58:01Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 18:58:01.949559 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2023-10-02T18:58:01Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 18:58:02.358000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.359005 systemd[1]: Finished systemd-network-generator.service. Oct 2 18:58:02.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.359963 systemd[1]: Finished systemd-remount-fs.service. Oct 2 18:58:02.360000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.361041 systemd[1]: Reached target network-pre.target. Oct 2 18:58:02.362988 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 18:58:02.364670 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 18:58:02.365344 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 18:58:02.371676 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 18:58:02.373344 systemd[1]: Starting systemd-journal-flush.service... Oct 2 18:58:02.374094 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 18:58:02.375372 systemd[1]: Starting systemd-random-seed.service... Oct 2 18:58:02.376040 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 18:58:02.377044 systemd[1]: Starting systemd-sysctl.service... Oct 2 18:58:02.378726 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 18:58:02.381818 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 18:58:02.382438 systemd-journald[994]: Time spent on flushing to /var/log/journal/bdd37df1e6004c1e9556090e9fbb33bb is 24.140ms for 987 entries. Oct 2 18:58:02.382438 systemd-journald[994]: System Journal (/var/log/journal/bdd37df1e6004c1e9556090e9fbb33bb) is 8.0M, max 195.6M, 187.6M free. Oct 2 18:58:02.420681 systemd-journald[994]: Received client request to flush runtime journal. Oct 2 18:58:02.384000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.392000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.398000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.383930 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 18:58:02.386617 systemd[1]: Starting systemd-sysusers.service... Oct 2 18:58:02.421488 udevadm[1030]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 18:58:02.391603 systemd[1]: Finished systemd-random-seed.service. Oct 2 18:58:02.392673 systemd[1]: Reached target first-boot-complete.target. Oct 2 18:58:02.397579 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 18:58:02.399566 systemd[1]: Starting systemd-udev-settle.service... Oct 2 18:58:02.406697 systemd[1]: Finished systemd-sysctl.service. Oct 2 18:58:02.412743 systemd[1]: Finished systemd-sysusers.service. Oct 2 18:58:02.421706 systemd[1]: Finished systemd-journal-flush.service. Oct 2 18:58:02.422000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.794928 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 18:58:02.795000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.796000 audit: BPF prog-id=24 op=LOAD Oct 2 18:58:02.796000 audit: BPF prog-id=25 op=LOAD Oct 2 18:58:02.796000 audit: BPF prog-id=7 op=UNLOAD Oct 2 18:58:02.796000 audit: BPF prog-id=8 op=UNLOAD Oct 2 18:58:02.796926 systemd[1]: Starting systemd-udevd.service... Oct 2 18:58:02.818362 systemd-udevd[1032]: Using default interface naming scheme 'v252'. Oct 2 18:58:02.840528 systemd[1]: Started systemd-udevd.service. Oct 2 18:58:02.840000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.843000 audit: BPF prog-id=26 op=LOAD Oct 2 18:58:02.851033 systemd[1]: Starting systemd-networkd.service... Oct 2 18:58:02.868000 audit: BPF prog-id=27 op=LOAD Oct 2 18:58:02.868000 audit: BPF prog-id=28 op=LOAD Oct 2 18:58:02.868000 audit: BPF prog-id=29 op=LOAD Oct 2 18:58:02.869636 systemd[1]: Starting systemd-userdbd.service... Oct 2 18:58:02.879831 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Oct 2 18:58:02.905984 systemd[1]: Started systemd-userdbd.service. Oct 2 18:58:02.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.921839 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 18:58:02.962595 systemd[1]: Finished systemd-udev-settle.service. Oct 2 18:58:02.963000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.964685 systemd[1]: Starting lvm2-activation-early.service... Oct 2 18:58:02.968730 systemd-networkd[1046]: lo: Link UP Oct 2 18:58:02.968741 systemd-networkd[1046]: lo: Gained carrier Oct 2 18:58:02.969082 systemd-networkd[1046]: Enumeration completed Oct 2 18:58:02.969203 systemd-networkd[1046]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 18:58:02.969259 systemd[1]: Started systemd-networkd.service. Oct 2 18:58:02.969000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:02.973744 systemd-networkd[1046]: eth0: Link UP Oct 2 18:58:02.973754 systemd-networkd[1046]: eth0: Gained carrier Oct 2 18:58:02.983055 lvm[1065]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 18:58:03.004298 systemd-networkd[1046]: eth0: DHCPv4 address 10.0.0.73/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 18:58:03.013567 systemd[1]: Finished lvm2-activation-early.service. Oct 2 18:58:03.014000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:03.014355 systemd[1]: Reached target cryptsetup.target. Oct 2 18:58:03.016126 systemd[1]: Starting lvm2-activation.service... Oct 2 18:58:03.020302 lvm[1066]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 18:58:03.057132 systemd[1]: Finished lvm2-activation.service. Oct 2 18:58:03.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:03.057874 systemd[1]: Reached target local-fs-pre.target. Oct 2 18:58:03.058486 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 18:58:03.058515 systemd[1]: Reached target local-fs.target. Oct 2 18:58:03.059040 systemd[1]: Reached target machines.target. Oct 2 18:58:03.060882 systemd[1]: Starting ldconfig.service... Oct 2 18:58:03.061728 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 18:58:03.061795 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 18:58:03.062986 systemd[1]: Starting systemd-boot-update.service... Oct 2 18:58:03.064995 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 18:58:03.067009 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 18:58:03.067811 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 18:58:03.067877 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 18:58:03.068998 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 18:58:03.069951 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1068 (bootctl) Oct 2 18:58:03.071986 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 18:58:03.091613 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 18:58:03.092000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:03.193865 systemd-tmpfiles[1071]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 18:58:03.199444 systemd-tmpfiles[1071]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 18:58:03.200525 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 18:58:03.201000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:03.202922 systemd-tmpfiles[1071]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 18:58:03.249944 systemd-fsck[1077]: fsck.fat 4.2 (2021-01-31) Oct 2 18:58:03.249944 systemd-fsck[1077]: /dev/vda1: 236 files, 113463/258078 clusters Oct 2 18:58:03.252278 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 18:58:03.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:03.316946 ldconfig[1067]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 18:58:03.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:03.320346 systemd[1]: Finished ldconfig.service. Oct 2 18:58:03.333929 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 18:58:03.335385 systemd[1]: Mounting boot.mount... Oct 2 18:58:03.342380 systemd[1]: Mounted boot.mount. Oct 2 18:58:03.349216 systemd[1]: Finished systemd-boot-update.service. Oct 2 18:58:03.349000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:03.405537 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 18:58:03.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:03.407576 systemd[1]: Starting audit-rules.service... Oct 2 18:58:03.409146 systemd[1]: Starting clean-ca-certificates.service... Oct 2 18:58:03.410934 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 18:58:03.412000 audit: BPF prog-id=30 op=LOAD Oct 2 18:58:03.413828 systemd[1]: Starting systemd-resolved.service... Oct 2 18:58:03.415000 audit: BPF prog-id=31 op=LOAD Oct 2 18:58:03.417356 systemd[1]: Starting systemd-timesyncd.service... Oct 2 18:58:03.419008 systemd[1]: Starting systemd-update-utmp.service... Oct 2 18:58:03.420112 systemd[1]: Finished clean-ca-certificates.service. Oct 2 18:58:03.420000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:03.421281 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 18:58:03.425000 audit[1091]: SYSTEM_BOOT pid=1091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 18:58:03.428304 systemd[1]: Finished systemd-update-utmp.service. Oct 2 18:58:03.428000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:03.436630 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 18:58:03.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:03.438697 systemd[1]: Starting systemd-update-done.service... Oct 2 18:58:03.447463 systemd[1]: Finished systemd-update-done.service. Oct 2 18:58:03.448000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:03.450000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 18:58:03.450000 audit[1101]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd19abef0 a2=420 a3=0 items=0 ppid=1080 pid=1101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:03.450000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 18:58:03.450944 augenrules[1101]: No rules Oct 2 18:58:03.451776 systemd[1]: Finished audit-rules.service. Oct 2 18:58:03.465706 systemd-resolved[1087]: Positive Trust Anchors: Oct 2 18:58:03.465717 systemd-resolved[1087]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 18:58:03.465744 systemd-resolved[1087]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 18:58:03.466374 systemd[1]: Started systemd-timesyncd.service. Oct 2 18:58:02.999294 systemd-journald[994]: Time jumped backwards, rotating. Oct 2 18:58:02.979966 systemd-timesyncd[1090]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 2 18:58:02.980010 systemd-timesyncd[1090]: Initial clock synchronization to Mon 2023-10-02 18:58:02.979880 UTC. Oct 2 18:58:02.980330 systemd[1]: Reached target time-set.target. Oct 2 18:58:02.987773 systemd-resolved[1087]: Defaulting to hostname 'linux'. Oct 2 18:58:02.991298 systemd[1]: Started systemd-resolved.service. Oct 2 18:58:02.991977 systemd[1]: Reached target network.target. Oct 2 18:58:02.992579 systemd[1]: Reached target nss-lookup.target. Oct 2 18:58:02.993181 systemd[1]: Reached target sysinit.target. Oct 2 18:58:02.993934 systemd[1]: Started motdgen.path. Oct 2 18:58:02.994484 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 18:58:02.995346 systemd[1]: Started logrotate.timer. Oct 2 18:58:02.995946 systemd[1]: Started mdadm.timer. Oct 2 18:58:02.996550 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 18:58:02.997264 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 18:58:02.997288 systemd[1]: Reached target paths.target. Oct 2 18:58:02.997965 systemd[1]: Reached target timers.target. Oct 2 18:58:02.999064 systemd[1]: Listening on dbus.socket. Oct 2 18:58:03.000690 systemd[1]: Starting docker.socket... Oct 2 18:58:03.003834 systemd[1]: Listening on sshd.socket. Oct 2 18:58:03.004490 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 18:58:03.004951 systemd[1]: Listening on docker.socket. Oct 2 18:58:03.005611 systemd[1]: Reached target sockets.target. Oct 2 18:58:03.006162 systemd[1]: Reached target basic.target. Oct 2 18:58:03.006698 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 18:58:03.006726 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 18:58:03.007778 systemd[1]: Starting containerd.service... Oct 2 18:58:03.009378 systemd[1]: Starting dbus.service... Oct 2 18:58:03.010848 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 18:58:03.012502 systemd[1]: Starting extend-filesystems.service... Oct 2 18:58:03.013153 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 18:58:03.014253 systemd[1]: Starting motdgen.service... Oct 2 18:58:03.016282 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 18:58:03.019496 systemd[1]: Starting prepare-critools.service... Oct 2 18:58:03.022814 jq[1112]: false Oct 2 18:58:03.021207 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 18:58:03.022859 systemd[1]: Starting sshd-keygen.service... Oct 2 18:58:03.025678 systemd[1]: Starting systemd-logind.service... Oct 2 18:58:03.030264 extend-filesystems[1113]: Found vda Oct 2 18:58:03.030264 extend-filesystems[1113]: Found vda1 Oct 2 18:58:03.030264 extend-filesystems[1113]: Found vda2 Oct 2 18:58:03.030264 extend-filesystems[1113]: Found vda3 Oct 2 18:58:03.030264 extend-filesystems[1113]: Found usr Oct 2 18:58:03.030264 extend-filesystems[1113]: Found vda4 Oct 2 18:58:03.030264 extend-filesystems[1113]: Found vda6 Oct 2 18:58:03.030264 extend-filesystems[1113]: Found vda7 Oct 2 18:58:03.030264 extend-filesystems[1113]: Found vda9 Oct 2 18:58:03.030264 extend-filesystems[1113]: Checking size of /dev/vda9 Oct 2 18:58:03.026278 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 18:58:03.063259 extend-filesystems[1113]: Old size kept for /dev/vda9 Oct 2 18:58:03.026343 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 18:58:03.026874 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 18:58:03.071119 jq[1128]: true Oct 2 18:58:03.028532 systemd[1]: Starting update-engine.service... Oct 2 18:58:03.031401 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 18:58:03.071593 tar[1135]: ./ Oct 2 18:58:03.071593 tar[1135]: ./loopback Oct 2 18:58:03.035394 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 18:58:03.071952 tar[1136]: crictl Oct 2 18:58:03.035564 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 18:58:03.072463 jq[1139]: true Oct 2 18:58:03.037293 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 18:58:03.037517 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 18:58:03.054904 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 18:58:03.055071 systemd[1]: Finished extend-filesystems.service. Oct 2 18:58:03.078828 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 18:58:03.078985 systemd[1]: Finished motdgen.service. Oct 2 18:58:03.085846 dbus-daemon[1111]: [system] SELinux support is enabled Oct 2 18:58:03.086008 systemd[1]: Started dbus.service. Oct 2 18:58:03.089481 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 18:58:03.089517 systemd[1]: Reached target system-config.target. Oct 2 18:58:03.090174 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 18:58:03.090189 systemd[1]: Reached target user-config.target. Oct 2 18:58:03.130940 systemd-logind[1123]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 18:58:03.131227 tar[1135]: ./bandwidth Oct 2 18:58:03.131630 systemd-logind[1123]: New seat seat0. Oct 2 18:58:03.138937 bash[1164]: Updated "/home/core/.ssh/authorized_keys" Oct 2 18:58:03.138364 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 18:58:03.139778 systemd[1]: Started systemd-logind.service. Oct 2 18:58:03.146277 update_engine[1126]: I1002 18:58:03.144299 1126 main.cc:92] Flatcar Update Engine starting Oct 2 18:58:03.150003 update_engine[1126]: I1002 18:58:03.149969 1126 update_check_scheduler.cc:74] Next update check in 8m20s Oct 2 18:58:03.150021 systemd[1]: Started update-engine.service. Oct 2 18:58:03.152481 systemd[1]: Started locksmithd.service. Oct 2 18:58:03.170351 env[1141]: time="2023-10-02T18:58:03.170299333Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 18:58:03.173627 tar[1135]: ./ptp Oct 2 18:58:03.201153 env[1141]: time="2023-10-02T18:58:03.201102813Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 18:58:03.201290 env[1141]: time="2023-10-02T18:58:03.201268453Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 18:58:03.202625 env[1141]: time="2023-10-02T18:58:03.202586133Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 18:58:03.202625 env[1141]: time="2023-10-02T18:58:03.202621493Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 18:58:03.202857 env[1141]: time="2023-10-02T18:58:03.202829173Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 18:58:03.202857 env[1141]: time="2023-10-02T18:58:03.202852293Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 18:58:03.202924 env[1141]: time="2023-10-02T18:58:03.202866613Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 18:58:03.202924 env[1141]: time="2023-10-02T18:58:03.202876733Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 18:58:03.202962 env[1141]: time="2023-10-02T18:58:03.202953773Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 18:58:03.203363 env[1141]: time="2023-10-02T18:58:03.203338733Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 18:58:03.203482 env[1141]: time="2023-10-02T18:58:03.203460813Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 18:58:03.203482 env[1141]: time="2023-10-02T18:58:03.203479333Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 18:58:03.203557 env[1141]: time="2023-10-02T18:58:03.203538893Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 18:58:03.203557 env[1141]: time="2023-10-02T18:58:03.203554173Z" level=info msg="metadata content store policy set" policy=shared Oct 2 18:58:03.211406 tar[1135]: ./vlan Oct 2 18:58:03.214267 env[1141]: time="2023-10-02T18:58:03.214230293Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 18:58:03.214335 env[1141]: time="2023-10-02T18:58:03.214274533Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 18:58:03.214335 env[1141]: time="2023-10-02T18:58:03.214289013Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 18:58:03.214401 env[1141]: time="2023-10-02T18:58:03.214353133Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 18:58:03.214435 env[1141]: time="2023-10-02T18:58:03.214424773Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 18:58:03.214511 env[1141]: time="2023-10-02T18:58:03.214445133Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 18:58:03.214511 env[1141]: time="2023-10-02T18:58:03.214469853Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 18:58:03.214954 env[1141]: time="2023-10-02T18:58:03.214927493Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 18:58:03.214994 env[1141]: time="2023-10-02T18:58:03.214959453Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 18:58:03.214994 env[1141]: time="2023-10-02T18:58:03.214978773Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 18:58:03.215031 env[1141]: time="2023-10-02T18:58:03.215003293Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 18:58:03.215031 env[1141]: time="2023-10-02T18:58:03.215015813Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 18:58:03.215199 env[1141]: time="2023-10-02T18:58:03.215176213Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 18:58:03.215302 env[1141]: time="2023-10-02T18:58:03.215274973Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 18:58:03.215579 env[1141]: time="2023-10-02T18:58:03.215556893Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 18:58:03.215623 env[1141]: time="2023-10-02T18:58:03.215588413Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 18:58:03.215623 env[1141]: time="2023-10-02T18:58:03.215612093Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 18:58:03.215885 env[1141]: time="2023-10-02T18:58:03.215865973Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 18:58:03.215925 env[1141]: time="2023-10-02T18:58:03.215885653Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 18:58:03.215925 env[1141]: time="2023-10-02T18:58:03.215900333Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 18:58:03.215925 env[1141]: time="2023-10-02T18:58:03.215911813Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 18:58:03.215990 env[1141]: time="2023-10-02T18:58:03.215934333Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 18:58:03.215990 env[1141]: time="2023-10-02T18:58:03.215947213Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 18:58:03.215990 env[1141]: time="2023-10-02T18:58:03.215958493Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 18:58:03.215990 env[1141]: time="2023-10-02T18:58:03.215969693Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 18:58:03.215990 env[1141]: time="2023-10-02T18:58:03.215982133Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 18:58:03.216160 env[1141]: time="2023-10-02T18:58:03.216140013Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 18:58:03.216189 env[1141]: time="2023-10-02T18:58:03.216163813Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 18:58:03.216189 env[1141]: time="2023-10-02T18:58:03.216177853Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 18:58:03.216234 env[1141]: time="2023-10-02T18:58:03.216190213Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 18:58:03.216234 env[1141]: time="2023-10-02T18:58:03.216204773Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 18:58:03.216234 env[1141]: time="2023-10-02T18:58:03.216225933Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 18:58:03.216288 env[1141]: time="2023-10-02T18:58:03.216243253Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 18:58:03.216288 env[1141]: time="2023-10-02T18:58:03.216276573Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 18:58:03.216561 env[1141]: time="2023-10-02T18:58:03.216493293Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 18:58:03.216561 env[1141]: time="2023-10-02T18:58:03.216559373Z" level=info msg="Connect containerd service" Oct 2 18:58:03.219526 env[1141]: time="2023-10-02T18:58:03.216602813Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 18:58:03.219526 env[1141]: time="2023-10-02T18:58:03.217516333Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 18:58:03.219526 env[1141]: time="2023-10-02T18:58:03.218008733Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 18:58:03.219526 env[1141]: time="2023-10-02T18:58:03.218068653Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 18:58:03.219526 env[1141]: time="2023-10-02T18:58:03.218109013Z" level=info msg="containerd successfully booted in 0.049124s" Oct 2 18:58:03.218407 systemd[1]: Started containerd.service. Oct 2 18:58:03.222697 env[1141]: time="2023-10-02T18:58:03.222654773Z" level=info msg="Start subscribing containerd event" Oct 2 18:58:03.222764 env[1141]: time="2023-10-02T18:58:03.222715573Z" level=info msg="Start recovering state" Oct 2 18:58:03.222820 env[1141]: time="2023-10-02T18:58:03.222802773Z" level=info msg="Start event monitor" Oct 2 18:58:03.222862 env[1141]: time="2023-10-02T18:58:03.222839693Z" level=info msg="Start snapshots syncer" Oct 2 18:58:03.222862 env[1141]: time="2023-10-02T18:58:03.222852373Z" level=info msg="Start cni network conf syncer for default" Oct 2 18:58:03.222901 env[1141]: time="2023-10-02T18:58:03.222865133Z" level=info msg="Start streaming server" Oct 2 18:58:03.245571 tar[1135]: ./host-device Oct 2 18:58:03.279351 tar[1135]: ./tuning Oct 2 18:58:03.310911 tar[1135]: ./vrf Oct 2 18:58:03.341862 tar[1135]: ./sbr Oct 2 18:58:03.367642 locksmithd[1165]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 18:58:03.372157 tar[1135]: ./tap Oct 2 18:58:03.406635 tar[1135]: ./dhcp Oct 2 18:58:03.491725 tar[1135]: ./static Oct 2 18:58:03.498999 systemd[1]: Finished prepare-critools.service. Oct 2 18:58:03.515674 tar[1135]: ./firewall Oct 2 18:58:03.547713 tar[1135]: ./macvlan Oct 2 18:58:03.576604 tar[1135]: ./dummy Oct 2 18:58:03.605247 tar[1135]: ./bridge Oct 2 18:58:03.636434 tar[1135]: ./ipvlan Oct 2 18:58:03.665106 tar[1135]: ./portmap Oct 2 18:58:03.692111 tar[1135]: ./host-local Oct 2 18:58:03.728031 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 18:58:04.229288 systemd-networkd[1046]: eth0: Gained IPv6LL Oct 2 18:58:04.284973 sshd_keygen[1137]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 18:58:04.305244 systemd[1]: Finished sshd-keygen.service. Oct 2 18:58:04.307274 systemd[1]: Starting issuegen.service... Oct 2 18:58:04.312655 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 18:58:04.312834 systemd[1]: Finished issuegen.service. Oct 2 18:58:04.315046 systemd[1]: Starting systemd-user-sessions.service... Oct 2 18:58:04.323633 systemd[1]: Finished systemd-user-sessions.service. Oct 2 18:58:04.325739 systemd[1]: Started getty@tty1.service. Oct 2 18:58:04.327491 systemd[1]: Started serial-getty@ttyAMA0.service. Oct 2 18:58:04.328267 systemd[1]: Reached target getty.target. Oct 2 18:58:04.328862 systemd[1]: Reached target multi-user.target. Oct 2 18:58:04.330580 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 18:58:04.337667 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 18:58:04.337821 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 18:58:04.338634 systemd[1]: Startup finished in 658ms (kernel) + 5.640s (initrd) + 4.593s (userspace) = 10.892s. Oct 2 18:58:06.154857 systemd[1]: Created slice system-sshd.slice. Oct 2 18:58:06.155935 systemd[1]: Started sshd@0-10.0.0.73:22-10.0.0.1:49744.service. Oct 2 18:58:06.223856 sshd[1192]: Accepted publickey for core from 10.0.0.1 port 49744 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 18:58:06.226142 sshd[1192]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:58:06.238781 systemd-logind[1123]: New session 1 of user core. Oct 2 18:58:06.239671 systemd[1]: Created slice user-500.slice. Oct 2 18:58:06.240783 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 18:58:06.250875 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 18:58:06.252306 systemd[1]: Starting user@500.service... Oct 2 18:58:06.258296 (systemd)[1195]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:58:06.317563 systemd[1195]: Queued start job for default target default.target. Oct 2 18:58:06.318085 systemd[1195]: Reached target paths.target. Oct 2 18:58:06.318105 systemd[1195]: Reached target sockets.target. Oct 2 18:58:06.318116 systemd[1195]: Reached target timers.target. Oct 2 18:58:06.318127 systemd[1195]: Reached target basic.target. Oct 2 18:58:06.318180 systemd[1195]: Reached target default.target. Oct 2 18:58:06.318208 systemd[1195]: Startup finished in 53ms. Oct 2 18:58:06.318260 systemd[1]: Started user@500.service. Oct 2 18:58:06.319256 systemd[1]: Started session-1.scope. Oct 2 18:58:06.371850 systemd[1]: Started sshd@1-10.0.0.73:22-10.0.0.1:49756.service. Oct 2 18:58:06.410183 sshd[1204]: Accepted publickey for core from 10.0.0.1 port 49756 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 18:58:06.411326 sshd[1204]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:58:06.414928 systemd-logind[1123]: New session 2 of user core. Oct 2 18:58:06.415751 systemd[1]: Started session-2.scope. Oct 2 18:58:06.476409 sshd[1204]: pam_unix(sshd:session): session closed for user core Oct 2 18:58:06.480391 systemd[1]: Started sshd@2-10.0.0.73:22-10.0.0.1:49760.service. Oct 2 18:58:06.480845 systemd[1]: sshd@1-10.0.0.73:22-10.0.0.1:49756.service: Deactivated successfully. Oct 2 18:58:06.481578 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 18:58:06.482038 systemd-logind[1123]: Session 2 logged out. Waiting for processes to exit. Oct 2 18:58:06.482647 systemd-logind[1123]: Removed session 2. Oct 2 18:58:06.521224 sshd[1209]: Accepted publickey for core from 10.0.0.1 port 49760 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 18:58:06.522505 sshd[1209]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:58:06.525816 systemd-logind[1123]: New session 3 of user core. Oct 2 18:58:06.526601 systemd[1]: Started session-3.scope. Oct 2 18:58:06.576932 sshd[1209]: pam_unix(sshd:session): session closed for user core Oct 2 18:58:06.579800 systemd[1]: sshd@2-10.0.0.73:22-10.0.0.1:49760.service: Deactivated successfully. Oct 2 18:58:06.580417 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 18:58:06.580951 systemd-logind[1123]: Session 3 logged out. Waiting for processes to exit. Oct 2 18:58:06.581914 systemd[1]: Started sshd@3-10.0.0.73:22-10.0.0.1:49762.service. Oct 2 18:58:06.582473 systemd-logind[1123]: Removed session 3. Oct 2 18:58:06.620777 sshd[1216]: Accepted publickey for core from 10.0.0.1 port 49762 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 18:58:06.622075 sshd[1216]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:58:06.625411 systemd-logind[1123]: New session 4 of user core. Oct 2 18:58:06.626231 systemd[1]: Started session-4.scope. Oct 2 18:58:06.681614 sshd[1216]: pam_unix(sshd:session): session closed for user core Oct 2 18:58:06.684771 systemd[1]: sshd@3-10.0.0.73:22-10.0.0.1:49762.service: Deactivated successfully. Oct 2 18:58:06.685406 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 18:58:06.685858 systemd-logind[1123]: Session 4 logged out. Waiting for processes to exit. Oct 2 18:58:06.686863 systemd[1]: Started sshd@4-10.0.0.73:22-10.0.0.1:49776.service. Oct 2 18:58:06.687617 systemd-logind[1123]: Removed session 4. Oct 2 18:58:06.725901 sshd[1222]: Accepted publickey for core from 10.0.0.1 port 49776 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 18:58:06.727167 sshd[1222]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:58:06.730451 systemd-logind[1123]: New session 5 of user core. Oct 2 18:58:06.731275 systemd[1]: Started session-5.scope. Oct 2 18:58:06.796635 sudo[1225]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 18:58:06.796859 sudo[1225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 18:58:06.810198 dbus-daemon[1111]: avc: received setenforce notice (enforcing=1) Oct 2 18:58:06.811705 sudo[1225]: pam_unix(sudo:session): session closed for user root Oct 2 18:58:06.813956 sshd[1222]: pam_unix(sshd:session): session closed for user core Oct 2 18:58:06.816849 systemd[1]: sshd@4-10.0.0.73:22-10.0.0.1:49776.service: Deactivated successfully. Oct 2 18:58:06.817513 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 18:58:06.818103 systemd-logind[1123]: Session 5 logged out. Waiting for processes to exit. Oct 2 18:58:06.819147 systemd[1]: Started sshd@5-10.0.0.73:22-10.0.0.1:49780.service. Oct 2 18:58:06.820090 systemd-logind[1123]: Removed session 5. Oct 2 18:58:06.857690 sshd[1229]: Accepted publickey for core from 10.0.0.1 port 49780 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 18:58:06.859038 sshd[1229]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:58:06.862290 systemd-logind[1123]: New session 6 of user core. Oct 2 18:58:06.863101 systemd[1]: Started session-6.scope. Oct 2 18:58:06.918019 sudo[1233]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 18:58:06.918248 sudo[1233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 18:58:06.921036 sudo[1233]: pam_unix(sudo:session): session closed for user root Oct 2 18:58:06.925904 sudo[1232]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 18:58:06.926121 sudo[1232]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 18:58:06.934932 systemd[1]: Stopping audit-rules.service... Oct 2 18:58:06.935000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 18:58:06.937287 auditctl[1236]: No rules Oct 2 18:58:06.937719 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 18:58:06.937877 systemd[1]: Stopped audit-rules.service. Oct 2 18:58:06.938134 kernel: kauditd_printk_skb: 127 callbacks suppressed Oct 2 18:58:06.938203 kernel: audit: type=1305 audit(1696273086.935:167): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 18:58:06.938221 kernel: audit: type=1300 audit(1696273086.935:167): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd092a100 a2=420 a3=0 items=0 ppid=1 pid=1236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:06.935000 audit[1236]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd092a100 a2=420 a3=0 items=0 ppid=1 pid=1236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:06.939321 systemd[1]: Starting audit-rules.service... Oct 2 18:58:06.935000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 18:58:06.941353 kernel: audit: type=1327 audit(1696273086.935:167): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 18:58:06.941399 kernel: audit: type=1131 audit(1696273086.936:168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:06.936000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:06.957097 augenrules[1253]: No rules Oct 2 18:58:06.958045 systemd[1]: Finished audit-rules.service. Oct 2 18:58:06.957000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:06.959198 sudo[1232]: pam_unix(sudo:session): session closed for user root Oct 2 18:58:06.960075 kernel: audit: type=1130 audit(1696273086.957:169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:06.960137 kernel: audit: type=1106 audit(1696273086.958:170): pid=1232 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:58:06.958000 audit[1232]: USER_END pid=1232 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:58:06.960634 sshd[1229]: pam_unix(sshd:session): session closed for user core Oct 2 18:58:06.958000 audit[1232]: CRED_DISP pid=1232 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:58:06.963610 systemd-logind[1123]: Session 6 logged out. Waiting for processes to exit. Oct 2 18:58:06.963747 systemd[1]: sshd@5-10.0.0.73:22-10.0.0.1:49780.service: Deactivated successfully. Oct 2 18:58:06.964240 kernel: audit: type=1104 audit(1696273086.958:171): pid=1232 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:58:06.964283 kernel: audit: type=1106 audit(1696273086.960:172): pid=1229 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:58:06.960000 audit[1229]: USER_END pid=1229 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:58:06.964318 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 18:58:06.965656 systemd[1]: Started sshd@6-10.0.0.73:22-10.0.0.1:49794.service. Oct 2 18:58:06.966635 kernel: audit: type=1104 audit(1696273086.960:173): pid=1229 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:58:06.960000 audit[1229]: CRED_DISP pid=1229 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:58:06.966452 systemd-logind[1123]: Removed session 6. Oct 2 18:58:06.968413 kernel: audit: type=1131 audit(1696273086.962:174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.73:22-10.0.0.1:49780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:06.962000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.73:22-10.0.0.1:49780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:06.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.73:22-10.0.0.1:49794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:07.003000 audit[1259]: USER_ACCT pid=1259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:58:07.004363 sshd[1259]: Accepted publickey for core from 10.0.0.1 port 49794 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 18:58:07.004000 audit[1259]: CRED_ACQ pid=1259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:58:07.004000 audit[1259]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2cf9ab0 a2=3 a3=1 items=0 ppid=1 pid=1259 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:07.004000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:58:07.005919 sshd[1259]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:58:07.009415 systemd-logind[1123]: New session 7 of user core. Oct 2 18:58:07.009824 systemd[1]: Started session-7.scope. Oct 2 18:58:07.012000 audit[1259]: USER_START pid=1259 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:58:07.014000 audit[1261]: CRED_ACQ pid=1261 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:58:07.065684 sudo[1262]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 18:58:07.065898 sudo[1262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 18:58:07.064000 audit[1262]: USER_ACCT pid=1262 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:58:07.064000 audit[1262]: CRED_REFR pid=1262 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:58:07.066000 audit[1262]: USER_START pid=1262 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:58:07.585412 systemd[1]: Reloading. Oct 2 18:58:07.651927 /usr/lib/systemd/system-generators/torcx-generator[1292]: time="2023-10-02T18:58:07Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 18:58:07.652213 /usr/lib/systemd/system-generators/torcx-generator[1292]: time="2023-10-02T18:58:07Z" level=info msg="torcx already run" Oct 2 18:58:07.708271 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 18:58:07.708292 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 18:58:07.723448 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 18:58:07.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.776000 audit: BPF prog-id=37 op=LOAD Oct 2 18:58:07.776000 audit: BPF prog-id=31 op=UNLOAD Oct 2 18:58:07.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.777000 audit: BPF prog-id=38 op=LOAD Oct 2 18:58:07.777000 audit: BPF prog-id=26 op=UNLOAD Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit: BPF prog-id=39 op=LOAD Oct 2 18:58:07.778000 audit: BPF prog-id=21 op=UNLOAD Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit: BPF prog-id=40 op=LOAD Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit: BPF prog-id=41 op=LOAD Oct 2 18:58:07.778000 audit: BPF prog-id=22 op=UNLOAD Oct 2 18:58:07.778000 audit: BPF prog-id=23 op=UNLOAD Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.779000 audit: BPF prog-id=42 op=LOAD Oct 2 18:58:07.779000 audit: BPF prog-id=27 op=UNLOAD Oct 2 18:58:07.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.779000 audit: BPF prog-id=43 op=LOAD Oct 2 18:58:07.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.779000 audit: BPF prog-id=44 op=LOAD Oct 2 18:58:07.779000 audit: BPF prog-id=28 op=UNLOAD Oct 2 18:58:07.779000 audit: BPF prog-id=29 op=UNLOAD Oct 2 18:58:07.780000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.780000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.780000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.780000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.780000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.780000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.780000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.780000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.780000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.780000 audit: BPF prog-id=45 op=LOAD Oct 2 18:58:07.780000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.780000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.780000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.780000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.780000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.780000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.780000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.780000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.780000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.780000 audit: BPF prog-id=46 op=LOAD Oct 2 18:58:07.780000 audit: BPF prog-id=24 op=UNLOAD Oct 2 18:58:07.780000 audit: BPF prog-id=25 op=UNLOAD Oct 2 18:58:07.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.781000 audit: BPF prog-id=47 op=LOAD Oct 2 18:58:07.781000 audit: BPF prog-id=35 op=UNLOAD Oct 2 18:58:07.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.782000 audit: BPF prog-id=48 op=LOAD Oct 2 18:58:07.782000 audit: BPF prog-id=30 op=UNLOAD Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit: BPF prog-id=49 op=LOAD Oct 2 18:58:07.783000 audit: BPF prog-id=32 op=UNLOAD Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit: BPF prog-id=50 op=LOAD Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:07.783000 audit: BPF prog-id=51 op=LOAD Oct 2 18:58:07.783000 audit: BPF prog-id=33 op=UNLOAD Oct 2 18:58:07.783000 audit: BPF prog-id=34 op=UNLOAD Oct 2 18:58:07.800951 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 18:58:07.807280 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 18:58:07.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:07.808197 systemd[1]: Reached target network-online.target. Oct 2 18:58:07.809766 systemd[1]: Started kubelet.service. Oct 2 18:58:07.808000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:07.820428 systemd[1]: Starting coreos-metadata.service... Oct 2 18:58:07.828000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:07.828000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:07.829119 systemd[1]: coreos-metadata.service: Deactivated successfully. Oct 2 18:58:07.829286 systemd[1]: Finished coreos-metadata.service. Oct 2 18:58:07.946830 kubelet[1330]: E1002 18:58:07.946697 1330 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 18:58:07.948000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 18:58:07.949326 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 18:58:07.949443 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 18:58:08.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:08.114000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:08.115706 systemd[1]: Stopped kubelet.service. Oct 2 18:58:08.131324 systemd[1]: Reloading. Oct 2 18:58:08.186609 /usr/lib/systemd/system-generators/torcx-generator[1399]: time="2023-10-02T18:58:08Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 18:58:08.186919 /usr/lib/systemd/system-generators/torcx-generator[1399]: time="2023-10-02T18:58:08Z" level=info msg="torcx already run" Oct 2 18:58:08.248486 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 18:58:08.248505 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 18:58:08.265489 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 18:58:08.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.321000 audit: BPF prog-id=52 op=LOAD Oct 2 18:58:08.321000 audit: BPF prog-id=37 op=UNLOAD Oct 2 18:58:08.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.321000 audit: BPF prog-id=53 op=LOAD Oct 2 18:58:08.321000 audit: BPF prog-id=38 op=UNLOAD Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit: BPF prog-id=54 op=LOAD Oct 2 18:58:08.322000 audit: BPF prog-id=39 op=UNLOAD Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit: BPF prog-id=55 op=LOAD Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.322000 audit: BPF prog-id=56 op=LOAD Oct 2 18:58:08.322000 audit: BPF prog-id=40 op=UNLOAD Oct 2 18:58:08.322000 audit: BPF prog-id=41 op=UNLOAD Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit: BPF prog-id=57 op=LOAD Oct 2 18:58:08.323000 audit: BPF prog-id=42 op=UNLOAD Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit: BPF prog-id=58 op=LOAD Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.323000 audit: BPF prog-id=59 op=LOAD Oct 2 18:58:08.323000 audit: BPF prog-id=43 op=UNLOAD Oct 2 18:58:08.323000 audit: BPF prog-id=44 op=UNLOAD Oct 2 18:58:08.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.324000 audit: BPF prog-id=60 op=LOAD Oct 2 18:58:08.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.324000 audit: BPF prog-id=61 op=LOAD Oct 2 18:58:08.324000 audit: BPF prog-id=45 op=UNLOAD Oct 2 18:58:08.324000 audit: BPF prog-id=46 op=UNLOAD Oct 2 18:58:08.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.325000 audit: BPF prog-id=62 op=LOAD Oct 2 18:58:08.325000 audit: BPF prog-id=47 op=UNLOAD Oct 2 18:58:08.326000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.326000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.326000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.326000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.326000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.326000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.326000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.326000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.326000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.326000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.326000 audit: BPF prog-id=63 op=LOAD Oct 2 18:58:08.326000 audit: BPF prog-id=48 op=UNLOAD Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit: BPF prog-id=64 op=LOAD Oct 2 18:58:08.327000 audit: BPF prog-id=49 op=UNLOAD Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit: BPF prog-id=65 op=LOAD Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:08.327000 audit: BPF prog-id=66 op=LOAD Oct 2 18:58:08.327000 audit: BPF prog-id=50 op=UNLOAD Oct 2 18:58:08.327000 audit: BPF prog-id=51 op=UNLOAD Oct 2 18:58:08.349706 systemd[1]: Started kubelet.service. Oct 2 18:58:08.349000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:08.397526 kubelet[1438]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 18:58:08.397526 kubelet[1438]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 18:58:08.397526 kubelet[1438]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 18:58:08.397872 kubelet[1438]: I1002 18:58:08.397597 1438 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 18:58:09.300104 kubelet[1438]: I1002 18:58:09.300068 1438 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 18:58:09.300104 kubelet[1438]: I1002 18:58:09.300099 1438 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 18:58:09.300340 kubelet[1438]: I1002 18:58:09.300326 1438 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 18:58:09.304168 kubelet[1438]: I1002 18:58:09.304103 1438 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 18:58:09.305897 kubelet[1438]: W1002 18:58:09.305875 1438 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 18:58:09.306581 kubelet[1438]: I1002 18:58:09.306558 1438 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 18:58:09.306813 kubelet[1438]: I1002 18:58:09.306797 1438 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 18:58:09.306873 kubelet[1438]: I1002 18:58:09.306862 1438 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 18:58:09.306954 kubelet[1438]: I1002 18:58:09.306888 1438 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 18:58:09.306954 kubelet[1438]: I1002 18:58:09.306899 1438 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 18:58:09.307009 kubelet[1438]: I1002 18:58:09.306999 1438 state_mem.go:36] "Initialized new in-memory state store" Oct 2 18:58:09.310256 kubelet[1438]: I1002 18:58:09.310233 1438 kubelet.go:405] "Attempting to sync node with API server" Oct 2 18:58:09.310373 kubelet[1438]: I1002 18:58:09.310359 1438 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 18:58:09.310465 kubelet[1438]: I1002 18:58:09.310454 1438 kubelet.go:309] "Adding apiserver pod source" Oct 2 18:58:09.310535 kubelet[1438]: I1002 18:58:09.310525 1438 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 18:58:09.310652 kubelet[1438]: E1002 18:58:09.310526 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:09.310652 kubelet[1438]: E1002 18:58:09.310493 1438 file.go:98] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:09.311535 kubelet[1438]: I1002 18:58:09.311515 1438 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 18:58:09.311987 kubelet[1438]: W1002 18:58:09.311974 1438 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 18:58:09.312955 kubelet[1438]: I1002 18:58:09.312924 1438 server.go:1168] "Started kubelet" Oct 2 18:58:09.314210 kubelet[1438]: I1002 18:58:09.314188 1438 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 18:58:09.313000 audit[1438]: AVC avc: denied { mac_admin } for pid=1438 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:09.313000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:58:09.313000 audit[1438]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ac5290 a1=4000ec9698 a2=4000ac5260 a3=25 items=0 ppid=1 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:09.313000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:58:09.313000 audit[1438]: AVC avc: denied { mac_admin } for pid=1438 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:09.313000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:58:09.313000 audit[1438]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400077d020 a1=4000ec96b0 a2=4000ac5320 a3=25 items=0 ppid=1 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:09.313000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:58:09.314633 kubelet[1438]: I1002 18:58:09.314369 1438 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 18:58:09.314633 kubelet[1438]: I1002 18:58:09.314403 1438 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 18:58:09.314633 kubelet[1438]: I1002 18:58:09.314460 1438 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 18:58:09.314633 kubelet[1438]: E1002 18:58:09.314465 1438 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 18:58:09.314633 kubelet[1438]: E1002 18:58:09.314489 1438 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 18:58:09.315141 kubelet[1438]: E1002 18:58:09.315118 1438 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"10.0.0.73\" not found" Oct 2 18:58:09.315192 kubelet[1438]: I1002 18:58:09.315168 1438 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 18:58:09.315265 kubelet[1438]: I1002 18:58:09.315250 1438 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 18:58:09.315712 kubelet[1438]: I1002 18:58:09.315688 1438 server.go:461] "Adding debug handlers to kubelet server" Oct 2 18:58:09.316838 kubelet[1438]: I1002 18:58:09.314215 1438 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 18:58:09.328642 kubelet[1438]: W1002 18:58:09.328611 1438 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: nodes "10.0.0.73" is forbidden: User "system:anonymous" cannot list resource "nodes" in API group "" at the cluster scope Oct 2 18:58:09.331998 kubelet[1438]: E1002 18:58:09.331969 1438 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: nodes "10.0.0.73" is forbidden: User "system:anonymous" cannot list resource "nodes" in API group "" at the cluster scope Oct 2 18:58:09.332127 kubelet[1438]: E1002 18:58:09.328696 1438 controller.go:146] "Failed to ensure lease exists, will retry" err="leases.coordination.k8s.io \"10.0.0.73\" is forbidden: User \"system:anonymous\" cannot get resource \"leases\" in API group \"coordination.k8s.io\" in the namespace \"kube-node-lease\"" interval="200ms" Oct 2 18:58:09.332200 kubelet[1438]: W1002 18:58:09.328801 1438 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: services is forbidden: User "system:anonymous" cannot list resource "services" in API group "" at the cluster scope Oct 2 18:58:09.332264 kubelet[1438]: E1002 18:58:09.332253 1438 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: services is forbidden: User "system:anonymous" cannot list resource "services" in API group "" at the cluster scope Oct 2 18:58:09.332315 kubelet[1438]: E1002 18:58:09.329310 1438 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.73.178a5f63328bd7bd", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.73", UID:"10.0.0.73", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.73"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 312839613, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 312839613, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events is forbidden: User "system:anonymous" cannot create resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 18:58:09.332526 kubelet[1438]: W1002 18:58:09.331479 1438 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: csidrivers.storage.k8s.io is forbidden: User "system:anonymous" cannot list resource "csidrivers" in API group "storage.k8s.io" at the cluster scope Oct 2 18:58:09.332613 kubelet[1438]: E1002 18:58:09.332601 1438 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: csidrivers.storage.k8s.io is forbidden: User "system:anonymous" cannot list resource "csidrivers" in API group "storage.k8s.io" at the cluster scope Oct 2 18:58:09.333188 kubelet[1438]: E1002 18:58:09.333114 1438 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.73.178a5f6332a4df3d", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.73", UID:"10.0.0.73", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"InvalidDiskCapacity", Message:"invalid capacity 0 on image filesystem", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.73"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 314479933, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 314479933, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events is forbidden: User "system:anonymous" cannot create resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 18:58:09.343661 kubelet[1438]: I1002 18:58:09.343620 1438 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 18:58:09.343661 kubelet[1438]: I1002 18:58:09.343640 1438 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 18:58:09.343661 kubelet[1438]: I1002 18:58:09.343658 1438 state_mem.go:36] "Initialized new in-memory state store" Oct 2 18:58:09.346000 audit[1455]: NETFILTER_CFG table=mangle:2 family=2 entries=2 op=nft_register_chain pid=1455 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:09.346000 audit[1455]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff9a8ac60 a2=0 a3=1 items=0 ppid=1438 pid=1455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:09.346000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 18:58:09.349000 audit[1457]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1457 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:09.349000 audit[1457]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=ffffee5e1500 a2=0 a3=1 items=0 ppid=1438 pid=1457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:09.349000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 18:58:09.352081 kubelet[1438]: E1002 18:58:09.351944 1438 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.73.178a5f6334575045", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.73", UID:"10.0.0.73", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node 10.0.0.73 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.73"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 342951493, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 342951493, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events is forbidden: User "system:anonymous" cannot create resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 18:58:09.353453 kubelet[1438]: E1002 18:58:09.353136 1438 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.73.178a5f6334576175", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.73", UID:"10.0.0.73", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node 10.0.0.73 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.73"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 342955893, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 342955893, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events is forbidden: User "system:anonymous" cannot create resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 18:58:09.355378 kubelet[1438]: E1002 18:58:09.355289 1438 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.73.178a5f6334577895", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.73", UID:"10.0.0.73", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node 10.0.0.73 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.73"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 342961813, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 342961813, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events is forbidden: User "system:anonymous" cannot create resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 18:58:09.416342 kubelet[1438]: I1002 18:58:09.416310 1438 kubelet_node_status.go:70] "Attempting to register node" node="10.0.0.73" Oct 2 18:58:09.417834 kubelet[1438]: E1002 18:58:09.417805 1438 kubelet_node_status.go:92] "Unable to register node with API server" err="nodes is forbidden: User \"system:anonymous\" cannot create resource \"nodes\" in API group \"\" at the cluster scope" node="10.0.0.73" Oct 2 18:58:09.417933 kubelet[1438]: E1002 18:58:09.417784 1438 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.73.178a5f6334575045", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.73", UID:"10.0.0.73", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node 10.0.0.73 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.73"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 342951493, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 416264653, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.73.178a5f6334575045" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 18:58:09.419549 kubelet[1438]: E1002 18:58:09.419480 1438 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.73.178a5f6334576175", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.73", UID:"10.0.0.73", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node 10.0.0.73 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.73"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 342955893, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 416276333, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.73.178a5f6334576175" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 18:58:09.420836 kubelet[1438]: E1002 18:58:09.420761 1438 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.73.178a5f6334577895", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.73", UID:"10.0.0.73", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node 10.0.0.73 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.73"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 342961813, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 416280493, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.73.178a5f6334577895" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 18:58:09.452841 kubelet[1438]: I1002 18:58:09.452811 1438 policy_none.go:49] "None policy: Start" Oct 2 18:58:09.353000 audit[1459]: NETFILTER_CFG table=filter:4 family=2 entries=2 op=nft_register_chain pid=1459 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:09.353000 audit[1459]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffca06d0a0 a2=0 a3=1 items=0 ppid=1438 pid=1459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:09.353000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 18:58:09.454507 kubelet[1438]: I1002 18:58:09.454480 1438 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 18:58:09.454560 kubelet[1438]: I1002 18:58:09.454512 1438 state_mem.go:35] "Initializing new in-memory state store" Oct 2 18:58:09.455000 audit[1464]: NETFILTER_CFG table=filter:5 family=2 entries=2 op=nft_register_chain pid=1464 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:09.455000 audit[1464]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc24f0650 a2=0 a3=1 items=0 ppid=1438 pid=1464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:09.455000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 18:58:09.460309 systemd[1]: Created slice kubepods.slice. Oct 2 18:58:09.464390 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 18:58:09.466955 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 18:58:09.480821 kubelet[1438]: I1002 18:58:09.480789 1438 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 18:58:09.479000 audit[1438]: AVC avc: denied { mac_admin } for pid=1438 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:09.479000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:58:09.479000 audit[1438]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d42480 a1=4000479158 a2=4000d42450 a3=25 items=0 ppid=1 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:09.479000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:58:09.481104 kubelet[1438]: I1002 18:58:09.480891 1438 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 18:58:09.481104 kubelet[1438]: I1002 18:58:09.481097 1438 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 18:58:09.481887 kubelet[1438]: E1002 18:58:09.481856 1438 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"10.0.0.73\" not found" Oct 2 18:58:09.487326 kubelet[1438]: E1002 18:58:09.487236 1438 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.73.178a5f633ca7418d", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.73", UID:"10.0.0.73", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeAllocatableEnforced", Message:"Updated Node Allocatable limit across pods", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.73"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 482408333, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 482408333, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events is forbidden: User "system:anonymous" cannot create resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 18:58:09.527000 audit[1469]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1469 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:09.527000 audit[1469]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffed570270 a2=0 a3=1 items=0 ppid=1438 pid=1469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:09.527000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 18:58:09.528792 kubelet[1438]: I1002 18:58:09.528640 1438 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 18:58:09.528000 audit[1470]: NETFILTER_CFG table=mangle:7 family=10 entries=2 op=nft_register_chain pid=1470 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:09.528000 audit[1470]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff1e08fc0 a2=0 a3=1 items=0 ppid=1438 pid=1470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:09.528000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 18:58:09.528000 audit[1471]: NETFILTER_CFG table=mangle:8 family=2 entries=1 op=nft_register_chain pid=1471 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:09.528000 audit[1471]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe1a4af80 a2=0 a3=1 items=0 ppid=1438 pid=1471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:09.528000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 18:58:09.530020 kubelet[1438]: I1002 18:58:09.530007 1438 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 18:58:09.530094 kubelet[1438]: I1002 18:58:09.530046 1438 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 18:58:09.530130 kubelet[1438]: I1002 18:58:09.530119 1438 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 18:58:09.530197 kubelet[1438]: E1002 18:58:09.530177 1438 kubelet.go:2281] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 18:58:09.530000 audit[1472]: NETFILTER_CFG table=mangle:9 family=10 entries=1 op=nft_register_chain pid=1472 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:09.530000 audit[1472]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffc959d10 a2=0 a3=1 items=0 ppid=1438 pid=1472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:09.530000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 18:58:09.530000 audit[1473]: NETFILTER_CFG table=nat:10 family=2 entries=2 op=nft_register_chain pid=1473 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:09.530000 audit[1473]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffd19cec30 a2=0 a3=1 items=0 ppid=1438 pid=1473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:09.530000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 18:58:09.531925 kubelet[1438]: W1002 18:58:09.531684 1438 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: runtimeclasses.node.k8s.io is forbidden: User "system:anonymous" cannot list resource "runtimeclasses" in API group "node.k8s.io" at the cluster scope Oct 2 18:58:09.531925 kubelet[1438]: E1002 18:58:09.531712 1438 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: runtimeclasses.node.k8s.io is forbidden: User "system:anonymous" cannot list resource "runtimeclasses" in API group "node.k8s.io" at the cluster scope Oct 2 18:58:09.533031 kubelet[1438]: E1002 18:58:09.532981 1438 controller.go:146] "Failed to ensure lease exists, will retry" err="leases.coordination.k8s.io \"10.0.0.73\" is forbidden: User \"system:anonymous\" cannot get resource \"leases\" in API group \"coordination.k8s.io\" in the namespace \"kube-node-lease\"" interval="400ms" Oct 2 18:58:09.531000 audit[1474]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_chain pid=1474 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:09.531000 audit[1474]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd29018e0 a2=0 a3=1 items=0 ppid=1438 pid=1474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:09.531000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 18:58:09.532000 audit[1475]: NETFILTER_CFG table=nat:12 family=10 entries=2 op=nft_register_chain pid=1475 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:09.532000 audit[1475]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffde6c29f0 a2=0 a3=1 items=0 ppid=1438 pid=1475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:09.532000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 18:58:09.533000 audit[1476]: NETFILTER_CFG table=filter:13 family=10 entries=2 op=nft_register_chain pid=1476 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:09.533000 audit[1476]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdc9a37c0 a2=0 a3=1 items=0 ppid=1438 pid=1476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:09.533000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 18:58:09.619040 kubelet[1438]: I1002 18:58:09.618950 1438 kubelet_node_status.go:70] "Attempting to register node" node="10.0.0.73" Oct 2 18:58:09.620409 kubelet[1438]: E1002 18:58:09.620363 1438 kubelet_node_status.go:92] "Unable to register node with API server" err="nodes is forbidden: User \"system:anonymous\" cannot create resource \"nodes\" in API group \"\" at the cluster scope" node="10.0.0.73" Oct 2 18:58:09.623096 kubelet[1438]: E1002 18:58:09.622994 1438 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.73.178a5f6334575045", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.73", UID:"10.0.0.73", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node 10.0.0.73 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.73"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 342951493, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 618904733, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.73.178a5f6334575045" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 18:58:09.624236 kubelet[1438]: E1002 18:58:09.624170 1438 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.73.178a5f6334576175", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.73", UID:"10.0.0.73", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node 10.0.0.73 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.73"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 342955893, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 618921013, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.73.178a5f6334576175" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 18:58:09.625314 kubelet[1438]: E1002 18:58:09.625254 1438 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.73.178a5f6334577895", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.73", UID:"10.0.0.73", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node 10.0.0.73 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.73"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 342961813, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 618923973, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.73.178a5f6334577895" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 18:58:09.935453 kubelet[1438]: E1002 18:58:09.935360 1438 controller.go:146] "Failed to ensure lease exists, will retry" err="leases.coordination.k8s.io \"10.0.0.73\" is forbidden: User \"system:anonymous\" cannot get resource \"leases\" in API group \"coordination.k8s.io\" in the namespace \"kube-node-lease\"" interval="800ms" Oct 2 18:58:10.021392 kubelet[1438]: I1002 18:58:10.021353 1438 kubelet_node_status.go:70] "Attempting to register node" node="10.0.0.73" Oct 2 18:58:10.022671 kubelet[1438]: E1002 18:58:10.022643 1438 kubelet_node_status.go:92] "Unable to register node with API server" err="nodes is forbidden: User \"system:anonymous\" cannot create resource \"nodes\" in API group \"\" at the cluster scope" node="10.0.0.73" Oct 2 18:58:10.022726 kubelet[1438]: E1002 18:58:10.022654 1438 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.73.178a5f6334575045", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.73", UID:"10.0.0.73", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node 10.0.0.73 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.73"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 342951493, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 58, 10, 21311933, time.Local), Count:4, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.73.178a5f6334575045" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 18:58:10.023616 kubelet[1438]: E1002 18:58:10.023548 1438 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.73.178a5f6334576175", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.73", UID:"10.0.0.73", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node 10.0.0.73 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.73"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 342955893, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 58, 10, 21321973, time.Local), Count:4, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.73.178a5f6334576175" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 18:58:10.024463 kubelet[1438]: E1002 18:58:10.024398 1438 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.73.178a5f6334577895", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.73", UID:"10.0.0.73", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node 10.0.0.73 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.73"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 58, 9, 342961813, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 58, 10, 21328293, time.Local), Count:4, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "10.0.0.73.178a5f6334577895" is forbidden: User "system:anonymous" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!) Oct 2 18:58:10.302412 kubelet[1438]: I1002 18:58:10.302319 1438 transport.go:147] "Certificate rotation detected, shutting down client connections to start using new credentials" Oct 2 18:58:10.311712 kubelet[1438]: E1002 18:58:10.311682 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:10.686170 kubelet[1438]: E1002 18:58:10.686069 1438 csi_plugin.go:295] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "10.0.0.73" not found Oct 2 18:58:10.739356 kubelet[1438]: E1002 18:58:10.739323 1438 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"10.0.0.73\" not found" node="10.0.0.73" Oct 2 18:58:10.823482 kubelet[1438]: I1002 18:58:10.823444 1438 kubelet_node_status.go:70] "Attempting to register node" node="10.0.0.73" Oct 2 18:58:10.827410 kubelet[1438]: I1002 18:58:10.827382 1438 kubelet_node_status.go:73] "Successfully registered node" node="10.0.0.73" Oct 2 18:58:10.838656 kubelet[1438]: I1002 18:58:10.838633 1438 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.1.0/24" Oct 2 18:58:10.839133 env[1141]: time="2023-10-02T18:58:10.839087253Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 18:58:10.839407 kubelet[1438]: I1002 18:58:10.839265 1438 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.1.0/24" Oct 2 18:58:10.867092 sudo[1262]: pam_unix(sudo:session): session closed for user root Oct 2 18:58:10.866000 audit[1262]: USER_END pid=1262 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:58:10.866000 audit[1262]: CRED_DISP pid=1262 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:58:10.868520 sshd[1259]: pam_unix(sshd:session): session closed for user core Oct 2 18:58:10.868000 audit[1259]: USER_END pid=1259 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:58:10.868000 audit[1259]: CRED_DISP pid=1259 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 18:58:10.871160 systemd[1]: sshd@6-10.0.0.73:22-10.0.0.1:49794.service: Deactivated successfully. Oct 2 18:58:10.870000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.73:22-10.0.0.1:49794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:58:10.871887 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 18:58:10.872432 systemd-logind[1123]: Session 7 logged out. Waiting for processes to exit. Oct 2 18:58:10.873243 systemd-logind[1123]: Removed session 7. Oct 2 18:58:11.311935 kubelet[1438]: E1002 18:58:11.311896 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:11.312084 kubelet[1438]: I1002 18:58:11.311980 1438 apiserver.go:52] "Watching apiserver" Oct 2 18:58:11.315035 kubelet[1438]: I1002 18:58:11.315000 1438 topology_manager.go:212] "Topology Admit Handler" Oct 2 18:58:11.315132 kubelet[1438]: I1002 18:58:11.315109 1438 topology_manager.go:212] "Topology Admit Handler" Oct 2 18:58:11.315172 kubelet[1438]: I1002 18:58:11.315155 1438 topology_manager.go:212] "Topology Admit Handler" Oct 2 18:58:11.316749 kubelet[1438]: I1002 18:58:11.316711 1438 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 18:58:11.320024 systemd[1]: Created slice kubepods-besteffort-pod325b0473_32d7_402d_a7e8_1acaf3588f5b.slice. Oct 2 18:58:11.325898 kubelet[1438]: I1002 18:58:11.325871 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/191930a6-ebef-46bf-941a-584815753398-lib-modules\") pod \"calico-node-n8fh6\" (UID: \"191930a6-ebef-46bf-941a-584815753398\") " pod="calico-system/calico-node-n8fh6" Oct 2 18:58:11.326276 kubelet[1438]: I1002 18:58:11.326250 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/191930a6-ebef-46bf-941a-584815753398-node-certs\") pod \"calico-node-n8fh6\" (UID: \"191930a6-ebef-46bf-941a-584815753398\") " pod="calico-system/calico-node-n8fh6" Oct 2 18:58:11.326498 kubelet[1438]: I1002 18:58:11.326482 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/191930a6-ebef-46bf-941a-584815753398-flexvol-driver-host\") pod \"calico-node-n8fh6\" (UID: \"191930a6-ebef-46bf-941a-584815753398\") " pod="calico-system/calico-node-n8fh6" Oct 2 18:58:11.326717 kubelet[1438]: I1002 18:58:11.326701 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/11af9b8c-889c-46cd-99e8-beb65b2aac7c-lib-modules\") pod \"kube-proxy-rwbh4\" (UID: \"11af9b8c-889c-46cd-99e8-beb65b2aac7c\") " pod="kube-system/kube-proxy-rwbh4" Oct 2 18:58:11.326811 kubelet[1438]: I1002 18:58:11.326800 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/325b0473-32d7-402d-a7e8-1acaf3588f5b-var-lib-calico\") pod \"tigera-operator-59c686f986-zd89m\" (UID: \"325b0473-32d7-402d-a7e8-1acaf3588f5b\") " pod="tigera-operator/tigera-operator-59c686f986-zd89m" Oct 2 18:58:11.326910 kubelet[1438]: I1002 18:58:11.326899 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/191930a6-ebef-46bf-941a-584815753398-policysync\") pod \"calico-node-n8fh6\" (UID: \"191930a6-ebef-46bf-941a-584815753398\") " pod="calico-system/calico-node-n8fh6" Oct 2 18:58:11.326997 kubelet[1438]: I1002 18:58:11.326987 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/191930a6-ebef-46bf-941a-584815753398-tigera-ca-bundle\") pod \"calico-node-n8fh6\" (UID: \"191930a6-ebef-46bf-941a-584815753398\") " pod="calico-system/calico-node-n8fh6" Oct 2 18:58:11.327098 kubelet[1438]: I1002 18:58:11.327087 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/191930a6-ebef-46bf-941a-584815753398-var-lib-calico\") pod \"calico-node-n8fh6\" (UID: \"191930a6-ebef-46bf-941a-584815753398\") " pod="calico-system/calico-node-n8fh6" Oct 2 18:58:11.327222 kubelet[1438]: I1002 18:58:11.327209 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/191930a6-ebef-46bf-941a-584815753398-cni-bin-dir\") pod \"calico-node-n8fh6\" (UID: \"191930a6-ebef-46bf-941a-584815753398\") " pod="calico-system/calico-node-n8fh6" Oct 2 18:58:11.327297 kubelet[1438]: I1002 18:58:11.327287 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/11af9b8c-889c-46cd-99e8-beb65b2aac7c-xtables-lock\") pod \"kube-proxy-rwbh4\" (UID: \"11af9b8c-889c-46cd-99e8-beb65b2aac7c\") " pod="kube-system/kube-proxy-rwbh4" Oct 2 18:58:11.327371 kubelet[1438]: I1002 18:58:11.327361 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dc5cx\" (UniqueName: \"kubernetes.io/projected/11af9b8c-889c-46cd-99e8-beb65b2aac7c-kube-api-access-dc5cx\") pod \"kube-proxy-rwbh4\" (UID: \"11af9b8c-889c-46cd-99e8-beb65b2aac7c\") " pod="kube-system/kube-proxy-rwbh4" Oct 2 18:58:11.327444 kubelet[1438]: I1002 18:58:11.327434 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/191930a6-ebef-46bf-941a-584815753398-cni-log-dir\") pod \"calico-node-n8fh6\" (UID: \"191930a6-ebef-46bf-941a-584815753398\") " pod="calico-system/calico-node-n8fh6" Oct 2 18:58:11.327511 kubelet[1438]: I1002 18:58:11.327503 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/11af9b8c-889c-46cd-99e8-beb65b2aac7c-kube-proxy\") pod \"kube-proxy-rwbh4\" (UID: \"11af9b8c-889c-46cd-99e8-beb65b2aac7c\") " pod="kube-system/kube-proxy-rwbh4" Oct 2 18:58:11.327627 kubelet[1438]: I1002 18:58:11.327614 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-l9txn\" (UniqueName: \"kubernetes.io/projected/325b0473-32d7-402d-a7e8-1acaf3588f5b-kube-api-access-l9txn\") pod \"tigera-operator-59c686f986-zd89m\" (UID: \"325b0473-32d7-402d-a7e8-1acaf3588f5b\") " pod="tigera-operator/tigera-operator-59c686f986-zd89m" Oct 2 18:58:11.327714 kubelet[1438]: I1002 18:58:11.327693 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/191930a6-ebef-46bf-941a-584815753398-xtables-lock\") pod \"calico-node-n8fh6\" (UID: \"191930a6-ebef-46bf-941a-584815753398\") " pod="calico-system/calico-node-n8fh6" Oct 2 18:58:11.327847 kubelet[1438]: I1002 18:58:11.327819 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/191930a6-ebef-46bf-941a-584815753398-var-run-calico\") pod \"calico-node-n8fh6\" (UID: \"191930a6-ebef-46bf-941a-584815753398\") " pod="calico-system/calico-node-n8fh6" Oct 2 18:58:11.327901 kubelet[1438]: I1002 18:58:11.327889 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/191930a6-ebef-46bf-941a-584815753398-cni-net-dir\") pod \"calico-node-n8fh6\" (UID: \"191930a6-ebef-46bf-941a-584815753398\") " pod="calico-system/calico-node-n8fh6" Oct 2 18:58:11.327941 kubelet[1438]: I1002 18:58:11.327932 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-drqrj\" (UniqueName: \"kubernetes.io/projected/191930a6-ebef-46bf-941a-584815753398-kube-api-access-drqrj\") pod \"calico-node-n8fh6\" (UID: \"191930a6-ebef-46bf-941a-584815753398\") " pod="calico-system/calico-node-n8fh6" Oct 2 18:58:11.327970 kubelet[1438]: I1002 18:58:11.327949 1438 reconciler.go:41] "Reconciler: start to sync state" Oct 2 18:58:11.331811 systemd[1]: Created slice kubepods-besteffort-pod191930a6_ebef_46bf_941a_584815753398.slice. Oct 2 18:58:11.348493 systemd[1]: Created slice kubepods-besteffort-pod11af9b8c_889c_46cd_99e8_beb65b2aac7c.slice. Oct 2 18:58:11.437290 kubelet[1438]: E1002 18:58:11.437254 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:11.437290 kubelet[1438]: W1002 18:58:11.437275 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:11.437430 kubelet[1438]: E1002 18:58:11.437300 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:11.444448 kubelet[1438]: E1002 18:58:11.444343 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:11.444448 kubelet[1438]: W1002 18:58:11.444361 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:11.444448 kubelet[1438]: E1002 18:58:11.444386 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:11.445148 kubelet[1438]: E1002 18:58:11.445129 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:11.445337 kubelet[1438]: W1002 18:58:11.445313 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:11.445419 kubelet[1438]: E1002 18:58:11.445407 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:11.451483 kubelet[1438]: E1002 18:58:11.451461 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:11.451483 kubelet[1438]: W1002 18:58:11.451480 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:11.451598 kubelet[1438]: E1002 18:58:11.451496 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:11.631624 env[1141]: time="2023-10-02T18:58:11.631506333Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-59c686f986-zd89m,Uid:325b0473-32d7-402d-a7e8-1acaf3588f5b,Namespace:tigera-operator,Attempt:0,}" Oct 2 18:58:11.634227 kubelet[1438]: E1002 18:58:11.634198 1438 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:58:11.639387 env[1141]: time="2023-10-02T18:58:11.639226573Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-n8fh6,Uid:191930a6-ebef-46bf-941a-584815753398,Namespace:calico-system,Attempt:0,}" Oct 2 18:58:11.650527 kubelet[1438]: E1002 18:58:11.650492 1438 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:58:11.651072 env[1141]: time="2023-10-02T18:58:11.651025293Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-rwbh4,Uid:11af9b8c-889c-46cd-99e8-beb65b2aac7c,Namespace:kube-system,Attempt:0,}" Oct 2 18:58:12.173560 env[1141]: time="2023-10-02T18:58:12.173516373Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:12.177700 env[1141]: time="2023-10-02T18:58:12.177661693Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:12.179814 env[1141]: time="2023-10-02T18:58:12.179768133Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:12.181834 env[1141]: time="2023-10-02T18:58:12.181800813Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:12.184343 env[1141]: time="2023-10-02T18:58:12.184318693Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:12.187065 env[1141]: time="2023-10-02T18:58:12.187001053Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:12.187773 env[1141]: time="2023-10-02T18:58:12.187748653Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:12.191715 env[1141]: time="2023-10-02T18:58:12.191677093Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:12.196163 env[1141]: time="2023-10-02T18:58:12.196132053Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:12.197014 env[1141]: time="2023-10-02T18:58:12.196982133Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:12.197991 env[1141]: time="2023-10-02T18:58:12.197960373Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:12.198799 env[1141]: time="2023-10-02T18:58:12.198771493Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:12.216068 env[1141]: time="2023-10-02T18:58:12.215993813Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:58:12.216203 env[1141]: time="2023-10-02T18:58:12.216084493Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:58:12.216203 env[1141]: time="2023-10-02T18:58:12.216112253Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:58:12.216354 env[1141]: time="2023-10-02T18:58:12.216321253Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fc16f44ee9729dc5e0783a4f2994661ecbb557b3005fdfcb57c0b3b4bd380835 pid=1503 runtime=io.containerd.runc.v2 Oct 2 18:58:12.216703 env[1141]: time="2023-10-02T18:58:12.216628493Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:58:12.216761 env[1141]: time="2023-10-02T18:58:12.216722333Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:58:12.216786 env[1141]: time="2023-10-02T18:58:12.216751093Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:58:12.217013 env[1141]: time="2023-10-02T18:58:12.216955173Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b4cc55ff8aba7c02297b2f219040516cdf222160a0c8bdce6d5a0d6d1c4b7964 pid=1505 runtime=io.containerd.runc.v2 Oct 2 18:58:12.224071 env[1141]: time="2023-10-02T18:58:12.223871013Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:58:12.224071 env[1141]: time="2023-10-02T18:58:12.223914973Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:58:12.224071 env[1141]: time="2023-10-02T18:58:12.223928773Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:58:12.224192 env[1141]: time="2023-10-02T18:58:12.224093173Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/41c6acf1a703da28f407b48569b123fddf4a001e7a42714d4b6cde0a01ebd918 pid=1531 runtime=io.containerd.runc.v2 Oct 2 18:58:12.236371 systemd[1]: Started cri-containerd-fc16f44ee9729dc5e0783a4f2994661ecbb557b3005fdfcb57c0b3b4bd380835.scope. Oct 2 18:58:12.245851 systemd[1]: Started cri-containerd-b4cc55ff8aba7c02297b2f219040516cdf222160a0c8bdce6d5a0d6d1c4b7964.scope. Oct 2 18:58:12.250466 systemd[1]: Started cri-containerd-41c6acf1a703da28f407b48569b123fddf4a001e7a42714d4b6cde0a01ebd918.scope. Oct 2 18:58:12.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.273506 kernel: kauditd_printk_skb: 416 callbacks suppressed Oct 2 18:58:12.273592 kernel: audit: type=1400 audit(1696273092.269:556): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.273615 kernel: audit: type=1400 audit(1696273092.270:557): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.277415 kernel: audit: type=1400 audit(1696273092.270:558): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.277482 kernel: audit: type=1400 audit(1696273092.270:559): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.279063 kernel: audit: type=1400 audit(1696273092.270:560): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.282422 kernel: audit: type=1400 audit(1696273092.270:561): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.284234 kernel: audit: type=1400 audit(1696273092.270:562): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.287218 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 18:58:12.287251 kernel: audit: type=1400 audit(1696273092.270:563): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.287272 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 18:58:12.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit: BPF prog-id=67 op=LOAD Oct 2 18:58:12.270000 audit[1526]: AVC avc: denied { bpf } for pid=1526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1526]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1503 pid=1526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:12.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663313666343465653937323964633565303738336134663239393436 Oct 2 18:58:12.270000 audit[1526]: AVC avc: denied { perfmon } for pid=1526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1526]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1503 pid=1526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:12.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663313666343465653937323964633565303738336134663239393436 Oct 2 18:58:12.270000 audit[1526]: AVC avc: denied { bpf } for pid=1526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1526]: AVC avc: denied { bpf } for pid=1526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1526]: AVC avc: denied { bpf } for pid=1526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1526]: AVC avc: denied { perfmon } for pid=1526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1526]: AVC avc: denied { perfmon } for pid=1526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1526]: AVC avc: denied { perfmon } for pid=1526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1526]: AVC avc: denied { perfmon } for pid=1526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1526]: AVC avc: denied { perfmon } for pid=1526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1526]: AVC avc: denied { bpf } for pid=1526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1526]: AVC avc: denied { bpf } for pid=1526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit: BPF prog-id=68 op=LOAD Oct 2 18:58:12.270000 audit[1526]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1503 pid=1526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:12.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663313666343465653937323964633565303738336134663239393436 Oct 2 18:58:12.270000 audit[1526]: AVC avc: denied { bpf } for pid=1526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1526]: AVC avc: denied { bpf } for pid=1526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1526]: AVC avc: denied { perfmon } for pid=1526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1526]: AVC avc: denied { perfmon } for pid=1526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1526]: AVC avc: denied { perfmon } for pid=1526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1526]: AVC avc: denied { perfmon } for pid=1526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1526]: AVC avc: denied { perfmon } for pid=1526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1526]: AVC avc: denied { bpf } for pid=1526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit[1526]: AVC avc: denied { bpf } for pid=1526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.270000 audit: BPF prog-id=69 op=LOAD Oct 2 18:58:12.270000 audit[1526]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1503 pid=1526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:12.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663313666343465653937323964633565303738336134663239393436 Oct 2 18:58:12.272000 audit: BPF prog-id=69 op=UNLOAD Oct 2 18:58:12.272000 audit: BPF prog-id=68 op=UNLOAD Oct 2 18:58:12.272000 audit[1526]: AVC avc: denied { bpf } for pid=1526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.272000 audit[1526]: AVC avc: denied { bpf } for pid=1526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.272000 audit[1526]: AVC avc: denied { bpf } for pid=1526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.272000 audit[1526]: AVC avc: denied { perfmon } for pid=1526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.272000 audit[1526]: AVC avc: denied { perfmon } for pid=1526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.272000 audit[1526]: AVC avc: denied { perfmon } for pid=1526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.272000 audit[1526]: AVC avc: denied { perfmon } for pid=1526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.272000 audit[1526]: AVC avc: denied { perfmon } for pid=1526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.272000 audit[1526]: AVC avc: denied { bpf } for pid=1526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.272000 audit[1526]: AVC avc: denied { bpf } for pid=1526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.272000 audit: BPF prog-id=70 op=LOAD Oct 2 18:58:12.272000 audit[1526]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1503 pid=1526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:12.272000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663313666343465653937323964633565303738336134663239393436 Oct 2 18:58:12.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.287000 audit: BPF prog-id=72 op=LOAD Oct 2 18:58:12.288000 audit[1527]: AVC avc: denied { bpf } for pid=1527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.288000 audit[1527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000149b38 a2=10 a3=0 items=0 ppid=1505 pid=1527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:12.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234636335356666386162613763303232393762326632313930343035 Oct 2 18:58:12.288000 audit[1527]: AVC avc: denied { perfmon } for pid=1527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.288000 audit[1527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001495a0 a2=3c a3=0 items=0 ppid=1505 pid=1527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:12.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234636335356666386162613763303232393762326632313930343035 Oct 2 18:58:12.288000 audit[1527]: AVC avc: denied { bpf } for pid=1527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.288000 audit[1527]: AVC avc: denied { bpf } for pid=1527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.288000 audit[1527]: AVC avc: denied { bpf } for pid=1527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.288000 audit[1527]: AVC avc: denied { perfmon } for pid=1527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.288000 audit[1527]: AVC avc: denied { perfmon } for pid=1527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.288000 audit[1527]: AVC avc: denied { perfmon } for pid=1527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.288000 audit[1527]: AVC avc: denied { perfmon } for pid=1527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.288000 audit[1527]: AVC avc: denied { perfmon } for pid=1527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.288000 audit[1527]: AVC avc: denied { bpf } for pid=1527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.288000 audit[1527]: AVC avc: denied { bpf } for pid=1527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.288000 audit: BPF prog-id=73 op=LOAD Oct 2 18:58:12.288000 audit[1527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001498e0 a2=78 a3=0 items=0 ppid=1505 pid=1527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:12.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234636335356666386162613763303232393762326632313930343035 Oct 2 18:58:12.289000 audit[1527]: AVC avc: denied { bpf } for pid=1527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.289000 audit[1527]: AVC avc: denied { bpf } for pid=1527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.289000 audit[1527]: AVC avc: denied { perfmon } for pid=1527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.289000 audit[1527]: AVC avc: denied { perfmon } for pid=1527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.289000 audit[1527]: AVC avc: denied { perfmon } for pid=1527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.289000 audit[1527]: AVC avc: denied { perfmon } for pid=1527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.289000 audit[1527]: AVC avc: denied { perfmon } for pid=1527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.289000 audit[1527]: AVC avc: denied { bpf } for pid=1527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.289000 audit[1527]: AVC avc: denied { bpf } for pid=1527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.289000 audit: BPF prog-id=74 op=LOAD Oct 2 18:58:12.289000 audit[1527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000149670 a2=78 a3=0 items=0 ppid=1505 pid=1527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:12.289000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234636335356666386162613763303232393762326632313930343035 Oct 2 18:58:12.289000 audit: BPF prog-id=74 op=UNLOAD Oct 2 18:58:12.289000 audit: BPF prog-id=73 op=UNLOAD Oct 2 18:58:12.289000 audit[1527]: AVC avc: denied { bpf } for pid=1527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.289000 audit[1527]: AVC avc: denied { bpf } for pid=1527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.289000 audit[1527]: AVC avc: denied { bpf } for pid=1527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.289000 audit[1527]: AVC avc: denied { perfmon } for pid=1527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.289000 audit[1527]: AVC avc: denied { perfmon } for pid=1527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.289000 audit[1527]: AVC avc: denied { perfmon } for pid=1527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.289000 audit[1527]: AVC avc: denied { perfmon } for pid=1527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.289000 audit[1527]: AVC avc: denied { perfmon } for pid=1527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.289000 audit[1527]: AVC avc: denied { bpf } for pid=1527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.289000 audit[1527]: AVC avc: denied { bpf } for pid=1527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.289000 audit: BPF prog-id=75 op=LOAD Oct 2 18:58:12.289000 audit[1527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000149b40 a2=78 a3=0 items=0 ppid=1505 pid=1527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:12.289000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234636335356666386162613763303232393762326632313930343035 Oct 2 18:58:12.291000 audit[1550]: AVC avc: denied { bpf } for pid=1550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.291000 audit[1550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=1531 pid=1550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:12.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431633661636631613730336461323866343037623438353639623132 Oct 2 18:58:12.291000 audit[1550]: AVC avc: denied { perfmon } for pid=1550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.291000 audit[1550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=1531 pid=1550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:12.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431633661636631613730336461323866343037623438353639623132 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { bpf } for pid=1550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { bpf } for pid=1550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { bpf } for pid=1550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { perfmon } for pid=1550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { perfmon } for pid=1550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { perfmon } for pid=1550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { perfmon } for pid=1550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { perfmon } for pid=1550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { bpf } for pid=1550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { bpf } for pid=1550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit: BPF prog-id=76 op=LOAD Oct 2 18:58:12.292000 audit[1550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=1531 pid=1550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:12.292000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431633661636631613730336461323866343037623438353639623132 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { bpf } for pid=1550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { bpf } for pid=1550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { perfmon } for pid=1550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { perfmon } for pid=1550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { perfmon } for pid=1550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { perfmon } for pid=1550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { perfmon } for pid=1550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { bpf } for pid=1550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { bpf } for pid=1550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit: BPF prog-id=77 op=LOAD Oct 2 18:58:12.292000 audit[1550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=1531 pid=1550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:12.292000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431633661636631613730336461323866343037623438353639623132 Oct 2 18:58:12.292000 audit: BPF prog-id=77 op=UNLOAD Oct 2 18:58:12.292000 audit: BPF prog-id=76 op=UNLOAD Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { bpf } for pid=1550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { bpf } for pid=1550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { bpf } for pid=1550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { perfmon } for pid=1550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { perfmon } for pid=1550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { perfmon } for pid=1550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { perfmon } for pid=1550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { perfmon } for pid=1550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { bpf } for pid=1550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit[1550]: AVC avc: denied { bpf } for pid=1550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:12.292000 audit: BPF prog-id=78 op=LOAD Oct 2 18:58:12.292000 audit[1550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=1531 pid=1550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:12.292000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431633661636631613730336461323866343037623438353639623132 Oct 2 18:58:12.303915 env[1141]: time="2023-10-02T18:58:12.302412693Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-rwbh4,Uid:11af9b8c-889c-46cd-99e8-beb65b2aac7c,Namespace:kube-system,Attempt:0,} returns sandbox id \"fc16f44ee9729dc5e0783a4f2994661ecbb557b3005fdfcb57c0b3b4bd380835\"" Oct 2 18:58:12.305411 kubelet[1438]: E1002 18:58:12.304546 1438 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:58:12.305971 env[1141]: time="2023-10-02T18:58:12.305919653Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\"" Oct 2 18:58:12.312117 kubelet[1438]: E1002 18:58:12.312021 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:12.312748 env[1141]: time="2023-10-02T18:58:12.312691053Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-n8fh6,Uid:191930a6-ebef-46bf-941a-584815753398,Namespace:calico-system,Attempt:0,} returns sandbox id \"b4cc55ff8aba7c02297b2f219040516cdf222160a0c8bdce6d5a0d6d1c4b7964\"" Oct 2 18:58:12.313839 kubelet[1438]: E1002 18:58:12.313421 1438 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:58:12.321516 env[1141]: time="2023-10-02T18:58:12.321466573Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-59c686f986-zd89m,Uid:325b0473-32d7-402d-a7e8-1acaf3588f5b,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"41c6acf1a703da28f407b48569b123fddf4a001e7a42714d4b6cde0a01ebd918\"" Oct 2 18:58:12.437416 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3477889860.mount: Deactivated successfully. Oct 2 18:58:13.313140 kubelet[1438]: E1002 18:58:13.313089 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:13.872954 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount135794568.mount: Deactivated successfully. Oct 2 18:58:14.284483 env[1141]: time="2023-10-02T18:58:14.284380813Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:14.285707 env[1141]: time="2023-10-02T18:58:14.285652493Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95195e68173b6cfcdd3125d7bbffa6759189df53b60ffe7a72256059cd5dd7af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:14.286661 env[1141]: time="2023-10-02T18:58:14.286633613Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:14.287882 env[1141]: time="2023-10-02T18:58:14.287855693Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:8e9eff2f6d0b398f9ac5f5a15c1cb7d5f468f28d64a78d593d57f72a969a54ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:14.288298 env[1141]: time="2023-10-02T18:58:14.288268253Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\" returns image reference \"sha256:95195e68173b6cfcdd3125d7bbffa6759189df53b60ffe7a72256059cd5dd7af\"" Oct 2 18:58:14.289093 env[1141]: time="2023-10-02T18:58:14.289070133Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\"" Oct 2 18:58:14.290593 env[1141]: time="2023-10-02T18:58:14.290561013Z" level=info msg="CreateContainer within sandbox \"fc16f44ee9729dc5e0783a4f2994661ecbb557b3005fdfcb57c0b3b4bd380835\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 18:58:14.316370 kubelet[1438]: E1002 18:58:14.316302 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:14.429738 env[1141]: time="2023-10-02T18:58:14.429658573Z" level=info msg="CreateContainer within sandbox \"fc16f44ee9729dc5e0783a4f2994661ecbb557b3005fdfcb57c0b3b4bd380835\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"7818c840775fda9e331d47e047b04623ccc5d8dae89a4568d73e5b8854af8600\"" Oct 2 18:58:14.430868 env[1141]: time="2023-10-02T18:58:14.430750133Z" level=info msg="StartContainer for \"7818c840775fda9e331d47e047b04623ccc5d8dae89a4568d73e5b8854af8600\"" Oct 2 18:58:14.453433 systemd[1]: Started cri-containerd-7818c840775fda9e331d47e047b04623ccc5d8dae89a4568d73e5b8854af8600.scope. Oct 2 18:58:14.479000 audit[1623]: AVC avc: denied { perfmon } for pid=1623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.479000 audit[1623]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=1503 pid=1623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738313863383430373735666461396533333164343765303437623034 Oct 2 18:58:14.479000 audit[1623]: AVC avc: denied { bpf } for pid=1623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.479000 audit[1623]: AVC avc: denied { bpf } for pid=1623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.479000 audit[1623]: AVC avc: denied { bpf } for pid=1623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.479000 audit[1623]: AVC avc: denied { perfmon } for pid=1623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.479000 audit[1623]: AVC avc: denied { perfmon } for pid=1623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.479000 audit[1623]: AVC avc: denied { perfmon } for pid=1623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.479000 audit[1623]: AVC avc: denied { perfmon } for pid=1623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.479000 audit[1623]: AVC avc: denied { perfmon } for pid=1623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.479000 audit[1623]: AVC avc: denied { bpf } for pid=1623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.479000 audit[1623]: AVC avc: denied { bpf } for pid=1623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.479000 audit: BPF prog-id=79 op=LOAD Oct 2 18:58:14.479000 audit[1623]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=1503 pid=1623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738313863383430373735666461396533333164343765303437623034 Oct 2 18:58:14.480000 audit[1623]: AVC avc: denied { bpf } for pid=1623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.480000 audit[1623]: AVC avc: denied { bpf } for pid=1623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.480000 audit[1623]: AVC avc: denied { perfmon } for pid=1623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.480000 audit[1623]: AVC avc: denied { perfmon } for pid=1623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.480000 audit[1623]: AVC avc: denied { perfmon } for pid=1623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.480000 audit[1623]: AVC avc: denied { perfmon } for pid=1623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.480000 audit[1623]: AVC avc: denied { perfmon } for pid=1623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.480000 audit[1623]: AVC avc: denied { bpf } for pid=1623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.480000 audit[1623]: AVC avc: denied { bpf } for pid=1623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.480000 audit: BPF prog-id=80 op=LOAD Oct 2 18:58:14.480000 audit[1623]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=1503 pid=1623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738313863383430373735666461396533333164343765303437623034 Oct 2 18:58:14.481000 audit: BPF prog-id=80 op=UNLOAD Oct 2 18:58:14.481000 audit: BPF prog-id=79 op=UNLOAD Oct 2 18:58:14.482000 audit[1623]: AVC avc: denied { bpf } for pid=1623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.482000 audit[1623]: AVC avc: denied { bpf } for pid=1623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.482000 audit[1623]: AVC avc: denied { bpf } for pid=1623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.482000 audit[1623]: AVC avc: denied { perfmon } for pid=1623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.482000 audit[1623]: AVC avc: denied { perfmon } for pid=1623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.482000 audit[1623]: AVC avc: denied { perfmon } for pid=1623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.482000 audit[1623]: AVC avc: denied { perfmon } for pid=1623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.482000 audit[1623]: AVC avc: denied { perfmon } for pid=1623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.482000 audit[1623]: AVC avc: denied { bpf } for pid=1623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.482000 audit[1623]: AVC avc: denied { bpf } for pid=1623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:14.482000 audit: BPF prog-id=81 op=LOAD Oct 2 18:58:14.482000 audit[1623]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=1503 pid=1623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.482000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738313863383430373735666461396533333164343765303437623034 Oct 2 18:58:14.498293 env[1141]: time="2023-10-02T18:58:14.498251053Z" level=info msg="StartContainer for \"7818c840775fda9e331d47e047b04623ccc5d8dae89a4568d73e5b8854af8600\" returns successfully" Oct 2 18:58:14.541373 kubelet[1438]: E1002 18:58:14.540873 1438 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:58:14.549526 kubelet[1438]: I1002 18:58:14.549405 1438 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-rwbh4" podStartSLOduration=2.565993973 podCreationTimestamp="2023-10-02 18:58:10 +0000 UTC" firstStartedPulling="2023-10-02 18:58:12.305471813 +0000 UTC m=+3.951000521" lastFinishedPulling="2023-10-02 18:58:14.288842973 +0000 UTC m=+5.934371681" observedRunningTime="2023-10-02 18:58:14.548811533 +0000 UTC m=+6.194340241" watchObservedRunningTime="2023-10-02 18:58:14.549365133 +0000 UTC m=+6.194893801" Oct 2 18:58:14.614000 audit[1673]: NETFILTER_CFG table=mangle:14 family=2 entries=1 op=nft_register_chain pid=1673 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:14.614000 audit[1673]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffef3716a0 a2=0 a3=ffffa204c6c0 items=0 ppid=1634 pid=1673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.614000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 18:58:14.614000 audit[1674]: NETFILTER_CFG table=mangle:15 family=10 entries=1 op=nft_register_chain pid=1674 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.614000 audit[1674]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff3e907f0 a2=0 a3=ffffa263f6c0 items=0 ppid=1634 pid=1674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.614000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 18:58:14.615000 audit[1676]: NETFILTER_CFG table=nat:16 family=2 entries=1 op=nft_register_chain pid=1676 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:14.615000 audit[1676]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeedae100 a2=0 a3=ffff8acf56c0 items=0 ppid=1634 pid=1676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.615000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 18:58:14.618000 audit[1678]: NETFILTER_CFG table=filter:17 family=2 entries=1 op=nft_register_chain pid=1678 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:14.618000 audit[1678]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc6ff50b0 a2=0 a3=ffff83b106c0 items=0 ppid=1634 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.618000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 18:58:14.618000 audit[1677]: NETFILTER_CFG table=nat:18 family=10 entries=1 op=nft_register_chain pid=1677 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.618000 audit[1677]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc27f3320 a2=0 a3=ffffa46ab6c0 items=0 ppid=1634 pid=1677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.618000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 18:58:14.619000 audit[1680]: NETFILTER_CFG table=filter:19 family=10 entries=1 op=nft_register_chain pid=1680 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.619000 audit[1680]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe59987a0 a2=0 a3=ffffa343b6c0 items=0 ppid=1634 pid=1680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.619000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 18:58:14.637398 kubelet[1438]: E1002 18:58:14.637369 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.637398 kubelet[1438]: W1002 18:58:14.637389 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.637504 kubelet[1438]: E1002 18:58:14.637411 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.637613 kubelet[1438]: E1002 18:58:14.637593 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.637613 kubelet[1438]: W1002 18:58:14.637603 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.637613 kubelet[1438]: E1002 18:58:14.637614 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.637776 kubelet[1438]: E1002 18:58:14.637758 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.637776 kubelet[1438]: W1002 18:58:14.637768 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.637835 kubelet[1438]: E1002 18:58:14.637788 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.638003 kubelet[1438]: E1002 18:58:14.637991 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.638003 kubelet[1438]: W1002 18:58:14.638002 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.638083 kubelet[1438]: E1002 18:58:14.638012 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.638173 kubelet[1438]: E1002 18:58:14.638150 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.638173 kubelet[1438]: W1002 18:58:14.638159 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.638173 kubelet[1438]: E1002 18:58:14.638169 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.638311 kubelet[1438]: E1002 18:58:14.638302 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.638311 kubelet[1438]: W1002 18:58:14.638310 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.638357 kubelet[1438]: E1002 18:58:14.638319 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.638506 kubelet[1438]: E1002 18:58:14.638493 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.638544 kubelet[1438]: W1002 18:58:14.638509 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.638544 kubelet[1438]: E1002 18:58:14.638520 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.638644 kubelet[1438]: E1002 18:58:14.638634 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.638670 kubelet[1438]: W1002 18:58:14.638644 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.638670 kubelet[1438]: E1002 18:58:14.638661 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.638802 kubelet[1438]: E1002 18:58:14.638790 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.638802 kubelet[1438]: W1002 18:58:14.638800 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.638851 kubelet[1438]: E1002 18:58:14.638816 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.639016 kubelet[1438]: E1002 18:58:14.638996 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.639016 kubelet[1438]: W1002 18:58:14.639007 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.639016 kubelet[1438]: E1002 18:58:14.639017 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.639158 kubelet[1438]: E1002 18:58:14.639148 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.639158 kubelet[1438]: W1002 18:58:14.639156 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.639206 kubelet[1438]: E1002 18:58:14.639166 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.639298 kubelet[1438]: E1002 18:58:14.639289 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.639322 kubelet[1438]: W1002 18:58:14.639303 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.639322 kubelet[1438]: E1002 18:58:14.639312 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.639452 kubelet[1438]: E1002 18:58:14.639441 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.639452 kubelet[1438]: W1002 18:58:14.639450 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.639496 kubelet[1438]: E1002 18:58:14.639460 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.639591 kubelet[1438]: E1002 18:58:14.639582 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.639591 kubelet[1438]: W1002 18:58:14.639590 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.639667 kubelet[1438]: E1002 18:58:14.639600 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.639722 kubelet[1438]: E1002 18:58:14.639712 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.639751 kubelet[1438]: W1002 18:58:14.639720 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.639751 kubelet[1438]: E1002 18:58:14.639740 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.639866 kubelet[1438]: E1002 18:58:14.639856 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.639866 kubelet[1438]: W1002 18:58:14.639865 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.639913 kubelet[1438]: E1002 18:58:14.639881 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.649205 kubelet[1438]: E1002 18:58:14.649182 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.649205 kubelet[1438]: W1002 18:58:14.649199 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.649286 kubelet[1438]: E1002 18:58:14.649216 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.649416 kubelet[1438]: E1002 18:58:14.649396 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.649416 kubelet[1438]: W1002 18:58:14.649408 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.649463 kubelet[1438]: E1002 18:58:14.649429 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.649634 kubelet[1438]: E1002 18:58:14.649615 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.649634 kubelet[1438]: W1002 18:58:14.649627 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.649694 kubelet[1438]: E1002 18:58:14.649644 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.649867 kubelet[1438]: E1002 18:58:14.649846 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.649867 kubelet[1438]: W1002 18:58:14.649861 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.649918 kubelet[1438]: E1002 18:58:14.649881 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.650020 kubelet[1438]: E1002 18:58:14.650010 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.650059 kubelet[1438]: W1002 18:58:14.650028 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.650084 kubelet[1438]: E1002 18:58:14.650046 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.650293 kubelet[1438]: E1002 18:58:14.650270 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.650293 kubelet[1438]: W1002 18:58:14.650286 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.650351 kubelet[1438]: E1002 18:58:14.650306 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.650451 kubelet[1438]: E1002 18:58:14.650441 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.650451 kubelet[1438]: W1002 18:58:14.650450 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.650496 kubelet[1438]: E1002 18:58:14.650460 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.650621 kubelet[1438]: E1002 18:58:14.650611 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.650647 kubelet[1438]: W1002 18:58:14.650620 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.650647 kubelet[1438]: E1002 18:58:14.650633 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.650965 kubelet[1438]: E1002 18:58:14.650946 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.650965 kubelet[1438]: W1002 18:58:14.650958 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.651063 kubelet[1438]: E1002 18:58:14.650970 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.651139 kubelet[1438]: E1002 18:58:14.651128 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.651139 kubelet[1438]: W1002 18:58:14.651137 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.651186 kubelet[1438]: E1002 18:58:14.651148 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.651298 kubelet[1438]: E1002 18:58:14.651289 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.651298 kubelet[1438]: W1002 18:58:14.651297 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.651345 kubelet[1438]: E1002 18:58:14.651306 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.651590 kubelet[1438]: E1002 18:58:14.651579 1438 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:58:14.651615 kubelet[1438]: W1002 18:58:14.651589 1438 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:58:14.651615 kubelet[1438]: E1002 18:58:14.651600 1438 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:58:14.716000 audit[1709]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_chain pid=1709 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:14.716000 audit[1709]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff7e209f0 a2=0 a3=ffff9a65c6c0 items=0 ppid=1634 pid=1709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.716000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 18:58:14.718000 audit[1711]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1711 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:14.718000 audit[1711]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff39786e0 a2=0 a3=ffff99e6e6c0 items=0 ppid=1634 pid=1711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.718000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 18:58:14.722000 audit[1714]: NETFILTER_CFG table=filter:22 family=2 entries=2 op=nft_register_chain pid=1714 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:14.722000 audit[1714]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffffa0d4f30 a2=0 a3=ffff7fe566c0 items=0 ppid=1634 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.722000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 18:58:14.723000 audit[1715]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_chain pid=1715 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:14.723000 audit[1715]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd59e6760 a2=0 a3=ffffab4146c0 items=0 ppid=1634 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.723000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 18:58:14.725000 audit[1717]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1717 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:14.725000 audit[1717]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdd9258f0 a2=0 a3=ffffbaa656c0 items=0 ppid=1634 pid=1717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.725000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 18:58:14.726000 audit[1718]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_chain pid=1718 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:14.726000 audit[1718]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc6949070 a2=0 a3=ffffb29356c0 items=0 ppid=1634 pid=1718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.726000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 18:58:14.729000 audit[1720]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1720 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:14.729000 audit[1720]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd2bb4290 a2=0 a3=ffffba42f6c0 items=0 ppid=1634 pid=1720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.729000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 18:58:14.733000 audit[1723]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_rule pid=1723 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:14.733000 audit[1723]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffec411210 a2=0 a3=ffff921ee6c0 items=0 ppid=1634 pid=1723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.733000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 18:58:14.734000 audit[1724]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_chain pid=1724 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:14.734000 audit[1724]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff98ecf60 a2=0 a3=ffffa965a6c0 items=0 ppid=1634 pid=1724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.734000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 18:58:14.736000 audit[1726]: NETFILTER_CFG table=filter:29 family=2 entries=1 op=nft_register_rule pid=1726 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:14.736000 audit[1726]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffef8337e0 a2=0 a3=ffffbdeb56c0 items=0 ppid=1634 pid=1726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.736000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 18:58:14.737000 audit[1727]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_chain pid=1727 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:14.737000 audit[1727]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcec88e40 a2=0 a3=ffff8d0106c0 items=0 ppid=1634 pid=1727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.737000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 18:58:14.740000 audit[1729]: NETFILTER_CFG table=filter:31 family=2 entries=1 op=nft_register_rule pid=1729 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:14.740000 audit[1729]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff69d1380 a2=0 a3=ffff815226c0 items=0 ppid=1634 pid=1729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.740000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 18:58:14.744000 audit[1732]: NETFILTER_CFG table=filter:32 family=2 entries=1 op=nft_register_rule pid=1732 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:14.744000 audit[1732]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffff8757e0 a2=0 a3=ffff9ed976c0 items=0 ppid=1634 pid=1732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.744000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 18:58:14.747000 audit[1735]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=1735 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:14.747000 audit[1735]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff72ab140 a2=0 a3=ffff9de8e6c0 items=0 ppid=1634 pid=1735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.747000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 18:58:14.749000 audit[1736]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1736 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:14.749000 audit[1736]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc6eaeba0 a2=0 a3=ffff9eb966c0 items=0 ppid=1634 pid=1736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.749000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 18:58:14.751000 audit[1738]: NETFILTER_CFG table=nat:35 family=2 entries=2 op=nft_register_chain pid=1738 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:14.751000 audit[1738]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffffb093ed0 a2=0 a3=ffff98f796c0 items=0 ppid=1634 pid=1738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.751000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 18:58:14.786000 audit[1743]: NETFILTER_CFG table=nat:36 family=2 entries=2 op=nft_register_chain pid=1743 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:14.786000 audit[1743]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=fffff1c67fd0 a2=0 a3=ffffbd5166c0 items=0 ppid=1634 pid=1743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.786000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 18:58:14.792000 audit[1748]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_chain pid=1748 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:14.792000 audit[1748]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcbdcf960 a2=0 a3=ffff9fec36c0 items=0 ppid=1634 pid=1748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.792000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 18:58:14.798000 audit[1750]: NETFILTER_CFG table=nat:38 family=2 entries=2 op=nft_register_chain pid=1750 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:58:14.798000 audit[1750]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffe7741d80 a2=0 a3=ffff9d2776c0 items=0 ppid=1634 pid=1750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.798000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 18:58:14.804000 audit[1752]: NETFILTER_CFG table=filter:39 family=2 entries=5 op=nft_register_rule pid=1752 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:58:14.804000 audit[1752]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=fffff57f15b0 a2=0 a3=ffffaa9ec6c0 items=0 ppid=1634 pid=1752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.804000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:58:14.817000 audit[1752]: NETFILTER_CFG table=nat:40 family=2 entries=54 op=nft_register_chain pid=1752 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:58:14.817000 audit[1752]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24988 a0=3 a1=fffff57f15b0 a2=0 a3=ffffaa9ec6c0 items=0 ppid=1634 pid=1752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.817000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:58:14.827000 audit[1760]: NETFILTER_CFG table=filter:41 family=10 entries=1 op=nft_register_chain pid=1760 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.827000 audit[1760]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffffb881840 a2=0 a3=ffff9a1036c0 items=0 ppid=1634 pid=1760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.827000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 18:58:14.831000 audit[1762]: NETFILTER_CFG table=filter:42 family=10 entries=2 op=nft_register_chain pid=1762 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.831000 audit[1762]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd0ce49c0 a2=0 a3=ffff87c396c0 items=0 ppid=1634 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.831000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 18:58:14.835000 audit[1765]: NETFILTER_CFG table=filter:43 family=10 entries=2 op=nft_register_chain pid=1765 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.835000 audit[1765]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc406d1c0 a2=0 a3=ffffae6aa6c0 items=0 ppid=1634 pid=1765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.835000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 18:58:14.836000 audit[1766]: NETFILTER_CFG table=filter:44 family=10 entries=1 op=nft_register_chain pid=1766 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.836000 audit[1766]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc592f270 a2=0 a3=ffffa6d8b6c0 items=0 ppid=1634 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.836000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 18:58:14.838000 audit[1768]: NETFILTER_CFG table=filter:45 family=10 entries=1 op=nft_register_rule pid=1768 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.838000 audit[1768]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc7da5520 a2=0 a3=ffff91c306c0 items=0 ppid=1634 pid=1768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.838000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 18:58:14.840000 audit[1769]: NETFILTER_CFG table=filter:46 family=10 entries=1 op=nft_register_chain pid=1769 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.840000 audit[1769]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffff69f090 a2=0 a3=ffff991366c0 items=0 ppid=1634 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.840000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 18:58:14.842000 audit[1771]: NETFILTER_CFG table=filter:47 family=10 entries=1 op=nft_register_rule pid=1771 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.842000 audit[1771]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd6ef0e00 a2=0 a3=ffff85ed86c0 items=0 ppid=1634 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.842000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 18:58:14.846000 audit[1774]: NETFILTER_CFG table=filter:48 family=10 entries=2 op=nft_register_chain pid=1774 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.846000 audit[1774]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffe64e5030 a2=0 a3=ffff9b6ed6c0 items=0 ppid=1634 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.846000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 18:58:14.847000 audit[1775]: NETFILTER_CFG table=filter:49 family=10 entries=1 op=nft_register_chain pid=1775 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.847000 audit[1775]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff5daa570 a2=0 a3=ffffb9f7f6c0 items=0 ppid=1634 pid=1775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.847000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 18:58:14.850000 audit[1777]: NETFILTER_CFG table=filter:50 family=10 entries=1 op=nft_register_rule pid=1777 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.850000 audit[1777]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe5f1a290 a2=0 a3=ffff964bb6c0 items=0 ppid=1634 pid=1777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.850000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 18:58:14.851000 audit[1778]: NETFILTER_CFG table=filter:51 family=10 entries=1 op=nft_register_chain pid=1778 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.851000 audit[1778]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc9a97b70 a2=0 a3=ffff9ccfa6c0 items=0 ppid=1634 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.851000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 18:58:14.853000 audit[1780]: NETFILTER_CFG table=filter:52 family=10 entries=1 op=nft_register_rule pid=1780 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.853000 audit[1780]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff82059c0 a2=0 a3=ffff83af16c0 items=0 ppid=1634 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.853000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 18:58:14.857000 audit[1783]: NETFILTER_CFG table=filter:53 family=10 entries=1 op=nft_register_rule pid=1783 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.857000 audit[1783]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffbe79d60 a2=0 a3=ffffb3fdf6c0 items=0 ppid=1634 pid=1783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.857000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 18:58:14.860000 audit[1786]: NETFILTER_CFG table=filter:54 family=10 entries=1 op=nft_register_rule pid=1786 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.860000 audit[1786]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc7dfed10 a2=0 a3=ffff838c46c0 items=0 ppid=1634 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.860000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 18:58:14.861000 audit[1787]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_chain pid=1787 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.861000 audit[1787]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffff8df460 a2=0 a3=ffff809eb6c0 items=0 ppid=1634 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.861000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 18:58:14.864000 audit[1789]: NETFILTER_CFG table=nat:56 family=10 entries=2 op=nft_register_chain pid=1789 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.864000 audit[1789]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffff871cec0 a2=0 a3=ffff979296c0 items=0 ppid=1634 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.864000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 18:58:14.867000 audit[1792]: NETFILTER_CFG table=nat:57 family=10 entries=2 op=nft_register_chain pid=1792 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.867000 audit[1792]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffea59ec70 a2=0 a3=ffff9d6b96c0 items=0 ppid=1634 pid=1792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.867000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 18:58:14.868000 audit[1793]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=1793 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.868000 audit[1793]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd0c0cbc0 a2=0 a3=ffff931e46c0 items=0 ppid=1634 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.868000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 18:58:14.871000 audit[1795]: NETFILTER_CFG table=filter:59 family=10 entries=1 op=nft_register_rule pid=1795 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.871000 audit[1795]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff584c290 a2=0 a3=ffff98b8f6c0 items=0 ppid=1634 pid=1795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.871000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 18:58:14.874000 audit[1798]: NETFILTER_CFG table=filter:60 family=10 entries=1 op=nft_register_rule pid=1798 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.874000 audit[1798]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd00de040 a2=0 a3=ffffa71256c0 items=0 ppid=1634 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.874000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 18:58:14.875000 audit[1799]: NETFILTER_CFG table=nat:61 family=10 entries=1 op=nft_register_chain pid=1799 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.875000 audit[1799]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd972f780 a2=0 a3=ffffa2d706c0 items=0 ppid=1634 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.875000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 18:58:14.878000 audit[1801]: NETFILTER_CFG table=nat:62 family=10 entries=2 op=nft_register_chain pid=1801 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:58:14.878000 audit[1801]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=fffffb13c010 a2=0 a3=ffffa34a36c0 items=0 ppid=1634 pid=1801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.878000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 18:58:14.881000 audit[1803]: NETFILTER_CFG table=filter:63 family=10 entries=3 op=nft_register_rule pid=1803 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 18:58:14.881000 audit[1803]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffde90d3b0 a2=0 a3=ffffb6a396c0 items=0 ppid=1634 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.881000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:58:14.881000 audit[1803]: NETFILTER_CFG table=nat:64 family=10 entries=7 op=nft_register_chain pid=1803 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 18:58:14.881000 audit[1803]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffde90d3b0 a2=0 a3=ffffb6a396c0 items=0 ppid=1634 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:14.881000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:58:15.288066 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount300079557.mount: Deactivated successfully. Oct 2 18:58:15.316724 kubelet[1438]: E1002 18:58:15.316689 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:15.351429 env[1141]: time="2023-10-02T18:58:15.351382973Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:15.352992 env[1141]: time="2023-10-02T18:58:15.352959293Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:125b9deae5a04d82056336c1aff8ab9c7ed64cdc224c7139c7433a3a29c21fc8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:15.354532 env[1141]: time="2023-10-02T18:58:15.354500533Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:15.356118 env[1141]: time="2023-10-02T18:58:15.356087493Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:182a323c25a3503be8c504892a12a55d99a42c3a582cb8e93a1ecc7c193a44c5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:15.356562 env[1141]: time="2023-10-02T18:58:15.356530573Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\" returns image reference \"sha256:125b9deae5a04d82056336c1aff8ab9c7ed64cdc224c7139c7433a3a29c21fc8\"" Oct 2 18:58:15.357511 env[1141]: time="2023-10-02T18:58:15.357481053Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\"" Oct 2 18:58:15.358466 env[1141]: time="2023-10-02T18:58:15.358432253Z" level=info msg="CreateContainer within sandbox \"b4cc55ff8aba7c02297b2f219040516cdf222160a0c8bdce6d5a0d6d1c4b7964\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Oct 2 18:58:15.367091 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3504314794.mount: Deactivated successfully. Oct 2 18:58:15.370315 env[1141]: time="2023-10-02T18:58:15.370269253Z" level=info msg="CreateContainer within sandbox \"b4cc55ff8aba7c02297b2f219040516cdf222160a0c8bdce6d5a0d6d1c4b7964\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"f91852827d51012ac5c79f4e0cb513a3801688d801df117e1e9089b26363e6e9\"" Oct 2 18:58:15.370708 env[1141]: time="2023-10-02T18:58:15.370669813Z" level=info msg="StartContainer for \"f91852827d51012ac5c79f4e0cb513a3801688d801df117e1e9089b26363e6e9\"" Oct 2 18:58:15.386750 systemd[1]: Started cri-containerd-f91852827d51012ac5c79f4e0cb513a3801688d801df117e1e9089b26363e6e9.scope. Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1505 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:15.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639313835323832376435313031326163356337396634653063623531 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit: BPF prog-id=82 op=LOAD Oct 2 18:58:15.412000 audit[1812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1505 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:15.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639313835323832376435313031326163356337396634653063623531 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit: BPF prog-id=83 op=LOAD Oct 2 18:58:15.412000 audit[1812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1505 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:15.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639313835323832376435313031326163356337396634653063623531 Oct 2 18:58:15.412000 audit: BPF prog-id=83 op=UNLOAD Oct 2 18:58:15.412000 audit: BPF prog-id=82 op=UNLOAD Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:15.412000 audit: BPF prog-id=84 op=LOAD Oct 2 18:58:15.412000 audit[1812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1505 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:15.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639313835323832376435313031326163356337396634653063623531 Oct 2 18:58:15.427926 env[1141]: time="2023-10-02T18:58:15.427879213Z" level=info msg="StartContainer for \"f91852827d51012ac5c79f4e0cb513a3801688d801df117e1e9089b26363e6e9\" returns successfully" Oct 2 18:58:15.437594 systemd[1]: cri-containerd-f91852827d51012ac5c79f4e0cb513a3801688d801df117e1e9089b26363e6e9.scope: Deactivated successfully. Oct 2 18:58:15.441000 audit: BPF prog-id=84 op=UNLOAD Oct 2 18:58:15.545561 kubelet[1438]: E1002 18:58:15.545042 1438 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:58:15.545737 kubelet[1438]: E1002 18:58:15.545151 1438 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:58:15.644439 env[1141]: time="2023-10-02T18:58:15.644390333Z" level=info msg="shim disconnected" id=f91852827d51012ac5c79f4e0cb513a3801688d801df117e1e9089b26363e6e9 Oct 2 18:58:15.644439 env[1141]: time="2023-10-02T18:58:15.644439453Z" level=warning msg="cleaning up after shim disconnected" id=f91852827d51012ac5c79f4e0cb513a3801688d801df117e1e9089b26363e6e9 namespace=k8s.io Oct 2 18:58:15.644608 env[1141]: time="2023-10-02T18:58:15.644449253Z" level=info msg="cleaning up dead shim" Oct 2 18:58:15.652765 env[1141]: time="2023-10-02T18:58:15.652715253Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:58:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=1856 runtime=io.containerd.runc.v2\n" Oct 2 18:58:16.317757 kubelet[1438]: E1002 18:58:16.317718 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:16.334789 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1453642931.mount: Deactivated successfully. Oct 2 18:58:16.547708 kubelet[1438]: E1002 18:58:16.547559 1438 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:58:16.894451 env[1141]: time="2023-10-02T18:58:16.894389253Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:16.896221 env[1141]: time="2023-10-02T18:58:16.896182853Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2bfa083ce51f1c757f20693cfea8ad121e2748f96a90fef52f087057eac59214,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:16.897601 env[1141]: time="2023-10-02T18:58:16.897573813Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:16.898971 env[1141]: time="2023-10-02T18:58:16.898946213Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:89eef35e1bbe8c88792ce69c3f3f38fb9838e58602c570524350b5f3ab127582,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:16.899646 env[1141]: time="2023-10-02T18:58:16.899617493Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\" returns image reference \"sha256:2bfa083ce51f1c757f20693cfea8ad121e2748f96a90fef52f087057eac59214\"" Oct 2 18:58:16.900453 env[1141]: time="2023-10-02T18:58:16.900429213Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\"" Oct 2 18:58:16.901569 env[1141]: time="2023-10-02T18:58:16.901540213Z" level=info msg="CreateContainer within sandbox \"41c6acf1a703da28f407b48569b123fddf4a001e7a42714d4b6cde0a01ebd918\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Oct 2 18:58:16.910452 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount963428965.mount: Deactivated successfully. Oct 2 18:58:16.951342 env[1141]: time="2023-10-02T18:58:16.951293573Z" level=info msg="CreateContainer within sandbox \"41c6acf1a703da28f407b48569b123fddf4a001e7a42714d4b6cde0a01ebd918\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"9c207cd4040265df5340beab4a7eee89a55776e5b45fc746e0e8c928411cf4e8\"" Oct 2 18:58:16.951953 env[1141]: time="2023-10-02T18:58:16.951929773Z" level=info msg="StartContainer for \"9c207cd4040265df5340beab4a7eee89a55776e5b45fc746e0e8c928411cf4e8\"" Oct 2 18:58:16.968027 systemd[1]: Started cri-containerd-9c207cd4040265df5340beab4a7eee89a55776e5b45fc746e0e8c928411cf4e8.scope. Oct 2 18:58:16.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.989000 audit: BPF prog-id=85 op=LOAD Oct 2 18:58:16.990000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.990000 audit[1876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=1531 pid=1876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:16.990000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963323037636434303430323635646635333430626561623461376565 Oct 2 18:58:16.990000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.990000 audit[1876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=1531 pid=1876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:16.990000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963323037636434303430323635646635333430626561623461376565 Oct 2 18:58:16.990000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.990000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.990000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.990000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.990000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.990000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.990000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.990000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.990000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.990000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.990000 audit: BPF prog-id=86 op=LOAD Oct 2 18:58:16.990000 audit[1876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=1531 pid=1876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:16.990000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963323037636434303430323635646635333430626561623461376565 Oct 2 18:58:16.991000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.991000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.991000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.991000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.991000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.991000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.991000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.991000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.991000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.991000 audit: BPF prog-id=87 op=LOAD Oct 2 18:58:16.991000 audit[1876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=1531 pid=1876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:16.991000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963323037636434303430323635646635333430626561623461376565 Oct 2 18:58:16.992000 audit: BPF prog-id=87 op=UNLOAD Oct 2 18:58:16.992000 audit: BPF prog-id=86 op=UNLOAD Oct 2 18:58:16.992000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.992000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.992000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.992000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.992000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.992000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.992000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.992000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.992000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.992000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:16.992000 audit: BPF prog-id=88 op=LOAD Oct 2 18:58:16.992000 audit[1876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=1531 pid=1876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:16.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963323037636434303430323635646635333430626561623461376565 Oct 2 18:58:17.006957 env[1141]: time="2023-10-02T18:58:17.006909813Z" level=info msg="StartContainer for \"9c207cd4040265df5340beab4a7eee89a55776e5b45fc746e0e8c928411cf4e8\" returns successfully" Oct 2 18:58:17.318638 kubelet[1438]: E1002 18:58:17.318531 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:17.558644 kubelet[1438]: I1002 18:58:17.558609 1438 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-59c686f986-zd89m" podStartSLOduration=2.981087853 podCreationTimestamp="2023-10-02 18:58:10 +0000 UTC" firstStartedPulling="2023-10-02 18:58:12.322423813 +0000 UTC m=+3.967952521" lastFinishedPulling="2023-10-02 18:58:16.899910333 +0000 UTC m=+8.545439041" observedRunningTime="2023-10-02 18:58:17.558282573 +0000 UTC m=+9.203811281" watchObservedRunningTime="2023-10-02 18:58:17.558574373 +0000 UTC m=+9.204103041" Oct 2 18:58:18.319318 kubelet[1438]: E1002 18:58:18.319281 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:19.319888 kubelet[1438]: E1002 18:58:19.319842 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:19.491338 env[1141]: time="2023-10-02T18:58:19.491297053Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:19.492333 env[1141]: time="2023-10-02T18:58:19.492299373Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0bb8d6f033a0548573ff857c26574d89a8ad4b691aa88a32eddf0c7db06599ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:19.493713 env[1141]: time="2023-10-02T18:58:19.493683533Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:19.494843 env[1141]: time="2023-10-02T18:58:19.494803253Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:34bf454be8cd5b9a35ab29c2479ff68a26497c2c87eb606e4bfe57c7fbeeff35,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:19.495215 env[1141]: time="2023-10-02T18:58:19.495187173Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\" returns image reference \"sha256:0bb8d6f033a0548573ff857c26574d89a8ad4b691aa88a32eddf0c7db06599ef\"" Oct 2 18:58:19.497224 env[1141]: time="2023-10-02T18:58:19.497192813Z" level=info msg="CreateContainer within sandbox \"b4cc55ff8aba7c02297b2f219040516cdf222160a0c8bdce6d5a0d6d1c4b7964\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Oct 2 18:58:19.507860 env[1141]: time="2023-10-02T18:58:19.507804893Z" level=info msg="CreateContainer within sandbox \"b4cc55ff8aba7c02297b2f219040516cdf222160a0c8bdce6d5a0d6d1c4b7964\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"9fdcf9ca7a7a7dc2cc22b6b4e3406e4f70f4863944c3b2c86fb41c2fcec63744\"" Oct 2 18:58:19.508362 env[1141]: time="2023-10-02T18:58:19.508321733Z" level=info msg="StartContainer for \"9fdcf9ca7a7a7dc2cc22b6b4e3406e4f70f4863944c3b2c86fb41c2fcec63744\"" Oct 2 18:58:19.527362 systemd[1]: Started cri-containerd-9fdcf9ca7a7a7dc2cc22b6b4e3406e4f70f4863944c3b2c86fb41c2fcec63744.scope. Oct 2 18:58:19.556114 kernel: kauditd_printk_skb: 460 callbacks suppressed Oct 2 18:58:19.556219 kernel: audit: type=1400 audit(1696273099.550:691): avc: denied { perfmon } for pid=1914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.556242 kernel: audit: type=1300 audit(1696273099.550:691): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1505 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:19.556259 kernel: audit: type=1327 audit(1696273099.550:691): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966646366396361376137613764633263633232623662346533343036 Oct 2 18:58:19.550000 audit[1914]: AVC avc: denied { perfmon } for pid=1914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.550000 audit[1914]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1505 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:19.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966646366396361376137613764633263633232623662346533343036 Oct 2 18:58:19.550000 audit[1914]: AVC avc: denied { bpf } for pid=1914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.560005 kernel: audit: type=1400 audit(1696273099.550:692): avc: denied { bpf } for pid=1914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.560087 kernel: audit: type=1400 audit(1696273099.550:692): avc: denied { bpf } for pid=1914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.550000 audit[1914]: AVC avc: denied { bpf } for pid=1914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.550000 audit[1914]: AVC avc: denied { bpf } for pid=1914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.563420 kernel: audit: type=1400 audit(1696273099.550:692): avc: denied { bpf } for pid=1914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.563496 kernel: audit: type=1400 audit(1696273099.550:692): avc: denied { perfmon } for pid=1914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.550000 audit[1914]: AVC avc: denied { perfmon } for pid=1914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.550000 audit[1914]: AVC avc: denied { perfmon } for pid=1914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.566679 kernel: audit: type=1400 audit(1696273099.550:692): avc: denied { perfmon } for pid=1914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.566739 kernel: audit: type=1400 audit(1696273099.550:692): avc: denied { perfmon } for pid=1914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.550000 audit[1914]: AVC avc: denied { perfmon } for pid=1914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.550000 audit[1914]: AVC avc: denied { perfmon } for pid=1914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.570010 kernel: audit: type=1400 audit(1696273099.550:692): avc: denied { perfmon } for pid=1914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.550000 audit[1914]: AVC avc: denied { perfmon } for pid=1914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.550000 audit[1914]: AVC avc: denied { bpf } for pid=1914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.550000 audit[1914]: AVC avc: denied { bpf } for pid=1914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.550000 audit: BPF prog-id=89 op=LOAD Oct 2 18:58:19.550000 audit[1914]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1505 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:19.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966646366396361376137613764633263633232623662346533343036 Oct 2 18:58:19.551000 audit[1914]: AVC avc: denied { bpf } for pid=1914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.551000 audit[1914]: AVC avc: denied { bpf } for pid=1914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.551000 audit[1914]: AVC avc: denied { perfmon } for pid=1914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.551000 audit[1914]: AVC avc: denied { perfmon } for pid=1914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.551000 audit[1914]: AVC avc: denied { perfmon } for pid=1914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.551000 audit[1914]: AVC avc: denied { perfmon } for pid=1914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.551000 audit[1914]: AVC avc: denied { perfmon } for pid=1914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.551000 audit[1914]: AVC avc: denied { bpf } for pid=1914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.551000 audit[1914]: AVC avc: denied { bpf } for pid=1914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.551000 audit: BPF prog-id=90 op=LOAD Oct 2 18:58:19.551000 audit[1914]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1505 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:19.551000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966646366396361376137613764633263633232623662346533343036 Oct 2 18:58:19.552000 audit: BPF prog-id=90 op=UNLOAD Oct 2 18:58:19.552000 audit: BPF prog-id=89 op=UNLOAD Oct 2 18:58:19.552000 audit[1914]: AVC avc: denied { bpf } for pid=1914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.552000 audit[1914]: AVC avc: denied { bpf } for pid=1914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.552000 audit[1914]: AVC avc: denied { bpf } for pid=1914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.552000 audit[1914]: AVC avc: denied { perfmon } for pid=1914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.552000 audit[1914]: AVC avc: denied { perfmon } for pid=1914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.552000 audit[1914]: AVC avc: denied { perfmon } for pid=1914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.552000 audit[1914]: AVC avc: denied { perfmon } for pid=1914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.552000 audit[1914]: AVC avc: denied { perfmon } for pid=1914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.552000 audit[1914]: AVC avc: denied { bpf } for pid=1914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.552000 audit[1914]: AVC avc: denied { bpf } for pid=1914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:19.552000 audit: BPF prog-id=91 op=LOAD Oct 2 18:58:19.552000 audit[1914]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1505 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:19.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966646366396361376137613764633263633232623662346533343036 Oct 2 18:58:19.578771 env[1141]: time="2023-10-02T18:58:19.578730173Z" level=info msg="StartContainer for \"9fdcf9ca7a7a7dc2cc22b6b4e3406e4f70f4863944c3b2c86fb41c2fcec63744\" returns successfully" Oct 2 18:58:20.174962 env[1141]: time="2023-10-02T18:58:20.174896253Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 18:58:20.176833 systemd[1]: cri-containerd-9fdcf9ca7a7a7dc2cc22b6b4e3406e4f70f4863944c3b2c86fb41c2fcec63744.scope: Deactivated successfully. Oct 2 18:58:20.184810 kubelet[1438]: I1002 18:58:20.184784 1438 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Oct 2 18:58:20.184000 audit: BPF prog-id=91 op=UNLOAD Oct 2 18:58:20.195863 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9fdcf9ca7a7a7dc2cc22b6b4e3406e4f70f4863944c3b2c86fb41c2fcec63744-rootfs.mount: Deactivated successfully. Oct 2 18:58:20.218117 kubelet[1438]: I1002 18:58:20.218074 1438 topology_manager.go:212] "Topology Admit Handler" Oct 2 18:58:20.223448 systemd[1]: Created slice kubepods-besteffort-pode54d74ec_ac48_4114_a543_f8eb4c1e1cd5.slice. Oct 2 18:58:20.320838 kubelet[1438]: E1002 18:58:20.320792 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:20.386163 kubelet[1438]: I1002 18:58:20.386121 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etccalico\" (UniqueName: \"kubernetes.io/host-path/e54d74ec-ac48-4114-a543-f8eb4c1e1cd5-etccalico\") pod \"csi-node-driver-k67kc\" (UID: \"e54d74ec-ac48-4114-a543-f8eb4c1e1cd5\") " pod="calico-system/csi-node-driver-k67kc" Oct 2 18:58:20.386163 kubelet[1438]: I1002 18:58:20.386165 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/e54d74ec-ac48-4114-a543-f8eb4c1e1cd5-kubelet-dir\") pod \"csi-node-driver-k67kc\" (UID: \"e54d74ec-ac48-4114-a543-f8eb4c1e1cd5\") " pod="calico-system/csi-node-driver-k67kc" Oct 2 18:58:20.386334 kubelet[1438]: I1002 18:58:20.386206 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/e54d74ec-ac48-4114-a543-f8eb4c1e1cd5-registration-dir\") pod \"csi-node-driver-k67kc\" (UID: \"e54d74ec-ac48-4114-a543-f8eb4c1e1cd5\") " pod="calico-system/csi-node-driver-k67kc" Oct 2 18:58:20.386334 kubelet[1438]: I1002 18:58:20.386301 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/e54d74ec-ac48-4114-a543-f8eb4c1e1cd5-varrun\") pod \"csi-node-driver-k67kc\" (UID: \"e54d74ec-ac48-4114-a543-f8eb4c1e1cd5\") " pod="calico-system/csi-node-driver-k67kc" Oct 2 18:58:20.386394 kubelet[1438]: I1002 18:58:20.386334 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/e54d74ec-ac48-4114-a543-f8eb4c1e1cd5-socket-dir\") pod \"csi-node-driver-k67kc\" (UID: \"e54d74ec-ac48-4114-a543-f8eb4c1e1cd5\") " pod="calico-system/csi-node-driver-k67kc" Oct 2 18:58:20.386394 kubelet[1438]: I1002 18:58:20.386370 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-p6kxd\" (UniqueName: \"kubernetes.io/projected/e54d74ec-ac48-4114-a543-f8eb4c1e1cd5-kube-api-access-p6kxd\") pod \"csi-node-driver-k67kc\" (UID: \"e54d74ec-ac48-4114-a543-f8eb4c1e1cd5\") " pod="calico-system/csi-node-driver-k67kc" Oct 2 18:58:20.393098 env[1141]: time="2023-10-02T18:58:20.393040413Z" level=info msg="shim disconnected" id=9fdcf9ca7a7a7dc2cc22b6b4e3406e4f70f4863944c3b2c86fb41c2fcec63744 Oct 2 18:58:20.393098 env[1141]: time="2023-10-02T18:58:20.393100173Z" level=warning msg="cleaning up after shim disconnected" id=9fdcf9ca7a7a7dc2cc22b6b4e3406e4f70f4863944c3b2c86fb41c2fcec63744 namespace=k8s.io Oct 2 18:58:20.393241 env[1141]: time="2023-10-02T18:58:20.393109773Z" level=info msg="cleaning up dead shim" Oct 2 18:58:20.401150 env[1141]: time="2023-10-02T18:58:20.401109373Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:58:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=1962 runtime=io.containerd.runc.v2\n" Oct 2 18:58:20.527206 env[1141]: time="2023-10-02T18:58:20.527095053Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-k67kc,Uid:e54d74ec-ac48-4114-a543-f8eb4c1e1cd5,Namespace:calico-system,Attempt:0,}" Oct 2 18:58:20.556881 kubelet[1438]: E1002 18:58:20.556848 1438 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:58:20.557716 env[1141]: time="2023-10-02T18:58:20.557675893Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\"" Oct 2 18:58:20.588457 env[1141]: time="2023-10-02T18:58:20.588384813Z" level=error msg="Failed to destroy network for sandbox \"53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:58:20.590417 env[1141]: time="2023-10-02T18:58:20.588751133Z" level=error msg="encountered an error cleaning up failed sandbox \"53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:58:20.590417 env[1141]: time="2023-10-02T18:58:20.588800533Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-k67kc,Uid:e54d74ec-ac48-4114-a543-f8eb4c1e1cd5,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:58:20.590498 kubelet[1438]: E1002 18:58:20.589936 1438 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:58:20.590498 kubelet[1438]: E1002 18:58:20.589997 1438 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-k67kc" Oct 2 18:58:20.590498 kubelet[1438]: E1002 18:58:20.590015 1438 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-k67kc" Oct 2 18:58:20.589633 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686-shm.mount: Deactivated successfully. Oct 2 18:58:20.590831 kubelet[1438]: E1002 18:58:20.590085 1438 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-k67kc_calico-system(e54d74ec-ac48-4114-a543-f8eb4c1e1cd5)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-k67kc_calico-system(e54d74ec-ac48-4114-a543-f8eb4c1e1cd5)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-k67kc" podUID=e54d74ec-ac48-4114-a543-f8eb4c1e1cd5 Oct 2 18:58:21.321680 kubelet[1438]: E1002 18:58:21.321622 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:21.560084 kubelet[1438]: I1002 18:58:21.559620 1438 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686" Oct 2 18:58:21.560250 env[1141]: time="2023-10-02T18:58:21.560202173Z" level=info msg="StopPodSandbox for \"53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686\"" Oct 2 18:58:21.586366 env[1141]: time="2023-10-02T18:58:21.586257413Z" level=error msg="StopPodSandbox for \"53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686\" failed" error="failed to destroy network for sandbox \"53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:58:21.586575 kubelet[1438]: E1002 18:58:21.586549 1438 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686" Oct 2 18:58:21.586618 kubelet[1438]: E1002 18:58:21.586605 1438 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686} Oct 2 18:58:21.586725 kubelet[1438]: E1002 18:58:21.586705 1438 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e54d74ec-ac48-4114-a543-f8eb4c1e1cd5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 18:58:21.587283 kubelet[1438]: E1002 18:58:21.586742 1438 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e54d74ec-ac48-4114-a543-f8eb4c1e1cd5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-k67kc" podUID=e54d74ec-ac48-4114-a543-f8eb4c1e1cd5 Oct 2 18:58:22.155291 kubelet[1438]: I1002 18:58:22.155238 1438 topology_manager.go:212] "Topology Admit Handler" Oct 2 18:58:22.160098 systemd[1]: Created slice kubepods-besteffort-pod91669085_44a9_4de1_a9f0_604b17655441.slice. Oct 2 18:58:22.295843 kubelet[1438]: I1002 18:58:22.295801 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7wjzd\" (UniqueName: \"kubernetes.io/projected/91669085-44a9-4de1-a9f0-604b17655441-kube-api-access-7wjzd\") pod \"nginx-deployment-845c78c8b9-bnshg\" (UID: \"91669085-44a9-4de1-a9f0-604b17655441\") " pod="default/nginx-deployment-845c78c8b9-bnshg" Oct 2 18:58:22.322060 kubelet[1438]: E1002 18:58:22.322006 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:22.463361 env[1141]: time="2023-10-02T18:58:22.463264213Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:nginx-deployment-845c78c8b9-bnshg,Uid:91669085-44a9-4de1-a9f0-604b17655441,Namespace:default,Attempt:0,}" Oct 2 18:58:22.533728 env[1141]: time="2023-10-02T18:58:22.533666693Z" level=error msg="Failed to destroy network for sandbox \"bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:58:22.534993 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d-shm.mount: Deactivated successfully. Oct 2 18:58:22.536154 env[1141]: time="2023-10-02T18:58:22.535959053Z" level=error msg="encountered an error cleaning up failed sandbox \"bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:58:22.536154 env[1141]: time="2023-10-02T18:58:22.536021813Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:nginx-deployment-845c78c8b9-bnshg,Uid:91669085-44a9-4de1-a9f0-604b17655441,Namespace:default,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:58:22.536306 kubelet[1438]: E1002 18:58:22.536282 1438 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:58:22.536400 kubelet[1438]: E1002 18:58:22.536335 1438 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="default/nginx-deployment-845c78c8b9-bnshg" Oct 2 18:58:22.536400 kubelet[1438]: E1002 18:58:22.536354 1438 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="default/nginx-deployment-845c78c8b9-bnshg" Oct 2 18:58:22.536400 kubelet[1438]: E1002 18:58:22.536396 1438 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"nginx-deployment-845c78c8b9-bnshg_default(91669085-44a9-4de1-a9f0-604b17655441)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"nginx-deployment-845c78c8b9-bnshg_default(91669085-44a9-4de1-a9f0-604b17655441)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="default/nginx-deployment-845c78c8b9-bnshg" podUID=91669085-44a9-4de1-a9f0-604b17655441 Oct 2 18:58:22.561639 kubelet[1438]: I1002 18:58:22.561602 1438 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d" Oct 2 18:58:22.562191 env[1141]: time="2023-10-02T18:58:22.562146573Z" level=info msg="StopPodSandbox for \"bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d\"" Oct 2 18:58:22.585666 env[1141]: time="2023-10-02T18:58:22.585606013Z" level=error msg="StopPodSandbox for \"bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d\" failed" error="failed to destroy network for sandbox \"bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:58:22.586081 kubelet[1438]: E1002 18:58:22.586033 1438 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d" Oct 2 18:58:22.586149 kubelet[1438]: E1002 18:58:22.586093 1438 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d} Oct 2 18:58:22.586149 kubelet[1438]: E1002 18:58:22.586137 1438 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"91669085-44a9-4de1-a9f0-604b17655441\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 18:58:22.586227 kubelet[1438]: E1002 18:58:22.586164 1438 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"91669085-44a9-4de1-a9f0-604b17655441\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="default/nginx-deployment-845c78c8b9-bnshg" podUID=91669085-44a9-4de1-a9f0-604b17655441 Oct 2 18:58:23.322938 kubelet[1438]: E1002 18:58:23.322885 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:23.848466 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4069550344.mount: Deactivated successfully. Oct 2 18:58:24.031649 env[1141]: time="2023-10-02T18:58:24.031602013Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:24.033294 env[1141]: time="2023-10-02T18:58:24.033264453Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8a2dff14388de51338e7468b834f0b37232379ce3cd97ac3c4a07b110a41ad00,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:24.034554 env[1141]: time="2023-10-02T18:58:24.034521253Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:24.035840 env[1141]: time="2023-10-02T18:58:24.035819733Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e898f4b7b55c908c88dad008ae939024e71ed93c5effbb10cca891b658b2f001,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:24.036240 env[1141]: time="2023-10-02T18:58:24.036211853Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\" returns image reference \"sha256:8a2dff14388de51338e7468b834f0b37232379ce3cd97ac3c4a07b110a41ad00\"" Oct 2 18:58:24.038555 env[1141]: time="2023-10-02T18:58:24.038525413Z" level=info msg="CreateContainer within sandbox \"b4cc55ff8aba7c02297b2f219040516cdf222160a0c8bdce6d5a0d6d1c4b7964\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Oct 2 18:58:24.049278 env[1141]: time="2023-10-02T18:58:24.049239373Z" level=info msg="CreateContainer within sandbox \"b4cc55ff8aba7c02297b2f219040516cdf222160a0c8bdce6d5a0d6d1c4b7964\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"e1862c7698867840c509ffccc403d86733a09b173f14e04b3fb22d11faa8e838\"" Oct 2 18:58:24.049723 env[1141]: time="2023-10-02T18:58:24.049700013Z" level=info msg="StartContainer for \"e1862c7698867840c509ffccc403d86733a09b173f14e04b3fb22d11faa8e838\"" Oct 2 18:58:24.069110 systemd[1]: Started cri-containerd-e1862c7698867840c509ffccc403d86733a09b173f14e04b3fb22d11faa8e838.scope. Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001495a0 a2=3c a3=0 items=0 ppid=1505 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:24.126000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531383632633736393838363738343063353039666663636334303364 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit: BPF prog-id=92 op=LOAD Oct 2 18:58:24.126000 audit[2104]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001498e0 a2=78 a3=0 items=0 ppid=1505 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:24.126000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531383632633736393838363738343063353039666663636334303364 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit: BPF prog-id=93 op=LOAD Oct 2 18:58:24.126000 audit[2104]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000149670 a2=78 a3=0 items=0 ppid=1505 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:24.126000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531383632633736393838363738343063353039666663636334303364 Oct 2 18:58:24.126000 audit: BPF prog-id=93 op=UNLOAD Oct 2 18:58:24.126000 audit: BPF prog-id=92 op=UNLOAD Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:24.126000 audit: BPF prog-id=94 op=LOAD Oct 2 18:58:24.126000 audit[2104]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000149b40 a2=78 a3=0 items=0 ppid=1505 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:24.126000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531383632633736393838363738343063353039666663636334303364 Oct 2 18:58:24.148438 env[1141]: time="2023-10-02T18:58:24.148392413Z" level=info msg="StartContainer for \"e1862c7698867840c509ffccc403d86733a09b173f14e04b3fb22d11faa8e838\" returns successfully" Oct 2 18:58:24.256461 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Oct 2 18:58:24.256585 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Oct 2 18:58:24.323942 kubelet[1438]: E1002 18:58:24.323903 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:24.567767 kubelet[1438]: E1002 18:58:24.567677 1438 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:58:25.324981 kubelet[1438]: E1002 18:58:25.324941 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:25.525000 audit[2257]: AVC avc: denied { write } for pid=2257 comm="tee" name="fd" dev="proc" ino=15635 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:58:25.527333 kernel: kauditd_printk_skb: 77 callbacks suppressed Oct 2 18:58:25.527407 kernel: audit: type=1400 audit(1696273105.525:704): avc: denied { write } for pid=2257 comm="tee" name="fd" dev="proc" ino=15635 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:58:25.534000 audit[2269]: AVC avc: denied { write } for pid=2269 comm="tee" name="fd" dev="proc" ino=14017 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:58:25.534000 audit[2263]: AVC avc: denied { write } for pid=2263 comm="tee" name="fd" dev="proc" ino=14700 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:58:25.539544 kernel: audit: type=1400 audit(1696273105.534:705): avc: denied { write } for pid=2269 comm="tee" name="fd" dev="proc" ino=14017 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:58:25.539623 kernel: audit: type=1400 audit(1696273105.534:706): avc: denied { write } for pid=2263 comm="tee" name="fd" dev="proc" ino=14700 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:58:25.539654 kernel: audit: type=1300 audit(1696273105.534:706): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff7e9998b a2=241 a3=1b6 items=1 ppid=2199 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:25.534000 audit[2263]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff7e9998b a2=241 a3=1b6 items=1 ppid=2199 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:25.534000 audit: CWD cwd="/etc/service/enabled/felix/log" Oct 2 18:58:25.543217 kernel: audit: type=1307 audit(1696273105.534:706): cwd="/etc/service/enabled/felix/log" Oct 2 18:58:25.543276 kernel: audit: type=1302 audit(1696273105.534:706): item=0 name="/dev/fd/63" inode=14696 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 18:58:25.534000 audit: PATH item=0 name="/dev/fd/63" inode=14696 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 18:58:25.534000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 18:58:25.546761 kernel: audit: type=1327 audit(1696273105.534:706): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 18:58:25.546813 kernel: audit: type=1400 audit(1696273105.534:707): avc: denied { write } for pid=2271 comm="tee" name="fd" dev="proc" ino=14021 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:58:25.534000 audit[2271]: AVC avc: denied { write } for pid=2271 comm="tee" name="fd" dev="proc" ino=14021 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:58:25.534000 audit[2271]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffefeca98b a2=241 a3=1b6 items=1 ppid=2203 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:25.551265 kernel: audit: type=1300 audit(1696273105.534:707): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffefeca98b a2=241 a3=1b6 items=1 ppid=2203 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:25.551321 kernel: audit: type=1307 audit(1696273105.534:707): cwd="/etc/service/enabled/bird6/log" Oct 2 18:58:25.534000 audit: CWD cwd="/etc/service/enabled/bird6/log" Oct 2 18:58:25.534000 audit: PATH item=0 name="/dev/fd/63" inode=14014 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 18:58:25.534000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 18:58:25.534000 audit[2265]: AVC avc: denied { write } for pid=2265 comm="tee" name="fd" dev="proc" ino=14025 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:58:25.534000 audit[2265]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe624297b a2=241 a3=1b6 items=1 ppid=2206 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:25.534000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Oct 2 18:58:25.534000 audit: PATH item=0 name="/dev/fd/63" inode=14697 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 18:58:25.534000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 18:58:25.534000 audit[2269]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc002498c a2=241 a3=1b6 items=1 ppid=2211 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:25.534000 audit: CWD cwd="/etc/service/enabled/bird/log" Oct 2 18:58:25.534000 audit: PATH item=0 name="/dev/fd/63" inode=14013 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 18:58:25.534000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 18:58:25.525000 audit[2257]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc23f597c a2=241 a3=1b6 items=1 ppid=2198 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:25.525000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Oct 2 18:58:25.525000 audit: PATH item=0 name="/dev/fd/63" inode=15629 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 18:58:25.525000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 18:58:25.564000 audit[2261]: AVC avc: denied { write } for pid=2261 comm="tee" name="fd" dev="proc" ino=13214 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:58:25.564000 audit[2261]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffea04798b a2=241 a3=1b6 items=1 ppid=2207 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:25.564000 audit: CWD cwd="/etc/service/enabled/confd/log" Oct 2 18:58:25.564000 audit: PATH item=0 name="/dev/fd/63" inode=15632 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 18:58:25.564000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 18:58:25.568958 kubelet[1438]: E1002 18:58:25.568928 1438 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:58:25.568000 audit[2267]: AVC avc: denied { write } for pid=2267 comm="tee" name="fd" dev="proc" ino=14036 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:58:25.568000 audit[2267]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe218b98d a2=241 a3=1b6 items=1 ppid=2205 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:25.568000 audit: CWD cwd="/etc/service/enabled/cni/log" Oct 2 18:58:25.568000 audit: PATH item=0 name="/dev/fd/63" inode=13211 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 18:58:25.568000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 18:58:25.704068 kernel: Initializing XFRM netlink socket Oct 2 18:58:25.799000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.799000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.799000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.799000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.799000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.799000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.799000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.799000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.799000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.799000 audit: BPF prog-id=95 op=LOAD Oct 2 18:58:25.799000 audit[2370]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe2388078 a2=70 a3=0 items=0 ppid=2202 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:25.799000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 18:58:25.800000 audit: BPF prog-id=95 op=UNLOAD Oct 2 18:58:25.800000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.800000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.800000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.800000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.800000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.800000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.800000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.800000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.800000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.800000 audit: BPF prog-id=96 op=LOAD Oct 2 18:58:25.800000 audit[2370]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe2388078 a2=70 a3=4a174c items=0 ppid=2202 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:25.800000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 18:58:25.800000 audit: BPF prog-id=96 op=UNLOAD Oct 2 18:58:25.800000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.800000 audit[2370]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffe23880a8 a2=70 a3=1549e79f items=0 ppid=2202 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:25.800000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 18:58:25.800000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.800000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.800000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.800000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.800000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.800000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.800000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.800000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.800000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.800000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.800000 audit: BPF prog-id=97 op=LOAD Oct 2 18:58:25.800000 audit[2370]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffe2387ff8 a2=70 a3=1549e7b9 items=0 ppid=2202 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:25.800000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 18:58:25.805000 audit[2373]: AVC avc: denied { bpf } for pid=2373 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.805000 audit[2373]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff176fed8 a2=70 a3=0 items=0 ppid=2202 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:25.805000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 18:58:25.805000 audit[2373]: AVC avc: denied { bpf } for pid=2373 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:25.805000 audit[2373]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff176fdb8 a2=70 a3=2 items=0 ppid=2202 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:25.805000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 18:58:25.817000 audit: BPF prog-id=97 op=UNLOAD Oct 2 18:58:25.888000 audit[2401]: NETFILTER_CFG table=mangle:65 family=2 entries=19 op=nft_register_chain pid=2401 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:58:25.888000 audit[2401]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6800 a0=3 a1=fffffc180300 a2=0 a3=ffffac414fa0 items=0 ppid=2202 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:25.888000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:58:25.889000 audit[2399]: NETFILTER_CFG table=raw:66 family=2 entries=19 op=nft_register_chain pid=2399 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:58:25.889000 audit[2399]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6132 a0=3 a1=ffffd3115f60 a2=0 a3=ffffa45e3fa0 items=0 ppid=2202 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:25.889000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:58:25.894000 audit[2404]: NETFILTER_CFG table=nat:67 family=2 entries=16 op=nft_register_chain pid=2404 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:58:25.894000 audit[2404]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5188 a0=3 a1=fffff7dad4b0 a2=0 a3=ffff80feefa0 items=0 ppid=2202 pid=2404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:25.894000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:58:25.895000 audit[2400]: NETFILTER_CFG table=filter:68 family=2 entries=39 op=nft_register_chain pid=2400 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:58:25.895000 audit[2400]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=18472 a0=3 a1=ffffef164840 a2=0 a3=ffff9c258fa0 items=0 ppid=2202 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:25.895000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:58:26.325538 kubelet[1438]: E1002 18:58:26.325433 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:26.570016 kubelet[1438]: E1002 18:58:26.569978 1438 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:58:26.713488 systemd-networkd[1046]: vxlan.calico: Link UP Oct 2 18:58:26.713494 systemd-networkd[1046]: vxlan.calico: Gained carrier Oct 2 18:58:27.326505 kubelet[1438]: E1002 18:58:27.326466 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:28.327109 kubelet[1438]: E1002 18:58:28.327074 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:28.549219 systemd-networkd[1046]: vxlan.calico: Gained IPv6LL Oct 2 18:58:29.311266 kubelet[1438]: E1002 18:58:29.311214 1438 file.go:104] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:29.327385 kubelet[1438]: E1002 18:58:29.327354 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:30.328255 kubelet[1438]: E1002 18:58:30.328210 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:31.329331 kubelet[1438]: E1002 18:58:31.329287 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:32.330335 kubelet[1438]: E1002 18:58:32.330292 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:33.330769 kubelet[1438]: E1002 18:58:33.330723 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:34.331130 kubelet[1438]: E1002 18:58:34.331081 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:34.499699 kubelet[1438]: E1002 18:58:34.499673 1438 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 18:58:34.515803 kubelet[1438]: I1002 18:58:34.515100 1438 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-n8fh6" podStartSLOduration=12.792885813 podCreationTimestamp="2023-10-02 18:58:10 +0000 UTC" firstStartedPulling="2023-10-02 18:58:12.314346333 +0000 UTC m=+3.959875001" lastFinishedPulling="2023-10-02 18:58:24.036523493 +0000 UTC m=+15.682052201" observedRunningTime="2023-10-02 18:58:24.583027373 +0000 UTC m=+16.228556041" watchObservedRunningTime="2023-10-02 18:58:34.515063013 +0000 UTC m=+26.160591721" Oct 2 18:58:35.332059 kubelet[1438]: E1002 18:58:35.331982 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:35.531688 env[1141]: time="2023-10-02T18:58:35.531644093Z" level=info msg="StopPodSandbox for \"53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686\"" Oct 2 18:58:35.657369 env[1141]: 2023-10-02 18:58:35.582 [INFO][2514] k8s.go 576: Cleaning up netns ContainerID="53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686" Oct 2 18:58:35.657369 env[1141]: 2023-10-02 18:58:35.583 [INFO][2514] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686" iface="eth0" netns="/var/run/netns/cni-79f8eb63-5737-1dfa-2c39-11e3ced4062f" Oct 2 18:58:35.657369 env[1141]: 2023-10-02 18:58:35.583 [INFO][2514] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686" iface="eth0" netns="/var/run/netns/cni-79f8eb63-5737-1dfa-2c39-11e3ced4062f" Oct 2 18:58:35.657369 env[1141]: 2023-10-02 18:58:35.583 [INFO][2514] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686" iface="eth0" netns="/var/run/netns/cni-79f8eb63-5737-1dfa-2c39-11e3ced4062f" Oct 2 18:58:35.657369 env[1141]: 2023-10-02 18:58:35.583 [INFO][2514] k8s.go 583: Releasing IP address(es) ContainerID="53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686" Oct 2 18:58:35.657369 env[1141]: 2023-10-02 18:58:35.583 [INFO][2514] utils.go 196: Calico CNI releasing IP address ContainerID="53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686" Oct 2 18:58:35.657369 env[1141]: 2023-10-02 18:58:35.634 [INFO][2521] ipam_plugin.go 416: Releasing address using handleID ContainerID="53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686" HandleID="k8s-pod-network.53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686" Workload="10.0.0.73-k8s-csi--node--driver--k67kc-eth0" Oct 2 18:58:35.657369 env[1141]: time="2023-10-02T18:58:35Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:58:35.657369 env[1141]: time="2023-10-02T18:58:35Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:58:35.657369 env[1141]: 2023-10-02 18:58:35.652 [WARNING][2521] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686" HandleID="k8s-pod-network.53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686" Workload="10.0.0.73-k8s-csi--node--driver--k67kc-eth0" Oct 2 18:58:35.657369 env[1141]: 2023-10-02 18:58:35.652 [INFO][2521] ipam_plugin.go 444: Releasing address using workloadID ContainerID="53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686" HandleID="k8s-pod-network.53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686" Workload="10.0.0.73-k8s-csi--node--driver--k67kc-eth0" Oct 2 18:58:35.657369 env[1141]: time="2023-10-02T18:58:35Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:58:35.657369 env[1141]: 2023-10-02 18:58:35.656 [INFO][2514] k8s.go 589: Teardown processing complete. ContainerID="53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686" Oct 2 18:58:35.658988 env[1141]: time="2023-10-02T18:58:35.658950693Z" level=info msg="TearDown network for sandbox \"53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686\" successfully" Oct 2 18:58:35.659053 env[1141]: time="2023-10-02T18:58:35.658990613Z" level=info msg="StopPodSandbox for \"53cea33c6fe75031725ee19822e8e54d4423c33b90c2080da7c43f90282c9686\" returns successfully" Oct 2 18:58:35.659615 systemd[1]: run-netns-cni\x2d79f8eb63\x2d5737\x2d1dfa\x2d2c39\x2d11e3ced4062f.mount: Deactivated successfully. Oct 2 18:58:35.659852 env[1141]: time="2023-10-02T18:58:35.659632733Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-k67kc,Uid:e54d74ec-ac48-4114-a543-f8eb4c1e1cd5,Namespace:calico-system,Attempt:1,}" Oct 2 18:58:35.811389 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 18:58:35.811498 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calibd4544d0b42: link becomes ready Oct 2 18:58:35.822377 systemd-networkd[1046]: calibd4544d0b42: Link UP Oct 2 18:58:35.822383 systemd-networkd[1046]: calibd4544d0b42: Gained carrier Oct 2 18:58:35.838852 env[1141]: 2023-10-02 18:58:35.713 [INFO][2534] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {10.0.0.73-k8s-csi--node--driver--k67kc-eth0 csi-node-driver- calico-system e54d74ec-ac48-4114-a543-f8eb4c1e1cd5 2192 0 2023-10-02 18:58:20 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:759544bff5 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s 10.0.0.73 csi-node-driver-k67kc eth0 default [] [] [kns.calico-system ksa.calico-system.default] calibd4544d0b42 [] []}} ContainerID="5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757" Namespace="calico-system" Pod="csi-node-driver-k67kc" WorkloadEndpoint="10.0.0.73-k8s-csi--node--driver--k67kc-" Oct 2 18:58:35.838852 env[1141]: 2023-10-02 18:58:35.714 [INFO][2534] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757" Namespace="calico-system" Pod="csi-node-driver-k67kc" WorkloadEndpoint="10.0.0.73-k8s-csi--node--driver--k67kc-eth0" Oct 2 18:58:35.838852 env[1141]: 2023-10-02 18:58:35.742 [INFO][2542] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757" HandleID="k8s-pod-network.5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757" Workload="10.0.0.73-k8s-csi--node--driver--k67kc-eth0" Oct 2 18:58:35.838852 env[1141]: 2023-10-02 18:58:35.758 [INFO][2542] ipam_plugin.go 269: Auto assigning IP ContainerID="5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757" HandleID="k8s-pod-network.5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757" Workload="10.0.0.73-k8s-csi--node--driver--k67kc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400022d990), Attrs:map[string]string{"namespace":"calico-system", "node":"10.0.0.73", "pod":"csi-node-driver-k67kc", "timestamp":"2023-10-02 18:58:35.742574373 +0000 UTC"}, Hostname:"10.0.0.73", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 18:58:35.838852 env[1141]: time="2023-10-02T18:58:35Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:58:35.838852 env[1141]: time="2023-10-02T18:58:35Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:58:35.838852 env[1141]: 2023-10-02 18:58:35.758 [INFO][2542] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host '10.0.0.73' Oct 2 18:58:35.838852 env[1141]: 2023-10-02 18:58:35.763 [INFO][2542] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757" host="10.0.0.73" Oct 2 18:58:35.838852 env[1141]: 2023-10-02 18:58:35.770 [INFO][2542] ipam.go 372: Looking up existing affinities for host host="10.0.0.73" Oct 2 18:58:35.838852 env[1141]: 2023-10-02 18:58:35.778 [INFO][2542] ipam.go 489: Trying affinity for 192.168.74.192/26 host="10.0.0.73" Oct 2 18:58:35.838852 env[1141]: 2023-10-02 18:58:35.782 [INFO][2542] ipam.go 155: Attempting to load block cidr=192.168.74.192/26 host="10.0.0.73" Oct 2 18:58:35.838852 env[1141]: 2023-10-02 18:58:35.784 [INFO][2542] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.74.192/26 host="10.0.0.73" Oct 2 18:58:35.838852 env[1141]: 2023-10-02 18:58:35.784 [INFO][2542] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.74.192/26 handle="k8s-pod-network.5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757" host="10.0.0.73" Oct 2 18:58:35.838852 env[1141]: 2023-10-02 18:58:35.790 [INFO][2542] ipam.go 1682: Creating new handle: k8s-pod-network.5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757 Oct 2 18:58:35.838852 env[1141]: 2023-10-02 18:58:35.798 [INFO][2542] ipam.go 1203: Writing block in order to claim IPs block=192.168.74.192/26 handle="k8s-pod-network.5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757" host="10.0.0.73" Oct 2 18:58:35.838852 env[1141]: 2023-10-02 18:58:35.804 [INFO][2542] ipam.go 1216: Successfully claimed IPs: [192.168.74.193/26] block=192.168.74.192/26 handle="k8s-pod-network.5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757" host="10.0.0.73" Oct 2 18:58:35.838852 env[1141]: 2023-10-02 18:58:35.804 [INFO][2542] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.74.193/26] handle="k8s-pod-network.5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757" host="10.0.0.73" Oct 2 18:58:35.838852 env[1141]: time="2023-10-02T18:58:35Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:58:35.838852 env[1141]: 2023-10-02 18:58:35.805 [INFO][2542] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.74.193/26] IPv6=[] ContainerID="5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757" HandleID="k8s-pod-network.5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757" Workload="10.0.0.73-k8s-csi--node--driver--k67kc-eth0" Oct 2 18:58:35.839419 env[1141]: 2023-10-02 18:58:35.808 [INFO][2534] k8s.go 383: Populated endpoint ContainerID="5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757" Namespace="calico-system" Pod="csi-node-driver-k67kc" WorkloadEndpoint="10.0.0.73-k8s-csi--node--driver--k67kc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.73-k8s-csi--node--driver--k67kc-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"e54d74ec-ac48-4114-a543-f8eb4c1e1cd5", ResourceVersion:"2192", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 58, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"759544bff5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.73", ContainerID:"", Pod:"csi-node-driver-k67kc", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.74.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calibd4544d0b42", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:58:35.839419 env[1141]: 2023-10-02 18:58:35.808 [INFO][2534] k8s.go 384: Calico CNI using IPs: [192.168.74.193/32] ContainerID="5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757" Namespace="calico-system" Pod="csi-node-driver-k67kc" WorkloadEndpoint="10.0.0.73-k8s-csi--node--driver--k67kc-eth0" Oct 2 18:58:35.839419 env[1141]: 2023-10-02 18:58:35.808 [INFO][2534] dataplane_linux.go 68: Setting the host side veth name to calibd4544d0b42 ContainerID="5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757" Namespace="calico-system" Pod="csi-node-driver-k67kc" WorkloadEndpoint="10.0.0.73-k8s-csi--node--driver--k67kc-eth0" Oct 2 18:58:35.839419 env[1141]: 2023-10-02 18:58:35.811 [INFO][2534] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757" Namespace="calico-system" Pod="csi-node-driver-k67kc" WorkloadEndpoint="10.0.0.73-k8s-csi--node--driver--k67kc-eth0" Oct 2 18:58:35.839419 env[1141]: 2023-10-02 18:58:35.822 [INFO][2534] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757" Namespace="calico-system" Pod="csi-node-driver-k67kc" WorkloadEndpoint="10.0.0.73-k8s-csi--node--driver--k67kc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.73-k8s-csi--node--driver--k67kc-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"e54d74ec-ac48-4114-a543-f8eb4c1e1cd5", ResourceVersion:"2192", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 58, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"759544bff5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.73", ContainerID:"5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757", Pod:"csi-node-driver-k67kc", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.74.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calibd4544d0b42", MAC:"12:c4:9b:8c:00:0f", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:58:35.839419 env[1141]: 2023-10-02 18:58:35.830 [INFO][2534] k8s.go 489: Wrote updated endpoint to datastore ContainerID="5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757" Namespace="calico-system" Pod="csi-node-driver-k67kc" WorkloadEndpoint="10.0.0.73-k8s-csi--node--driver--k67kc-eth0" Oct 2 18:58:35.846000 audit[2561]: NETFILTER_CFG table=filter:69 family=2 entries=36 op=nft_register_chain pid=2561 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:58:35.848513 kernel: kauditd_printk_skb: 86 callbacks suppressed Oct 2 18:58:35.848572 kernel: audit: type=1325 audit(1696273115.846:724): table=filter:69 family=2 entries=36 op=nft_register_chain pid=2561 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:58:35.846000 audit[2561]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19908 a0=3 a1=ffffd68a2580 a2=0 a3=ffffa4851fa0 items=0 ppid=2202 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:35.852877 kernel: audit: type=1300 audit(1696273115.846:724): arch=c00000b7 syscall=211 success=yes exit=19908 a0=3 a1=ffffd68a2580 a2=0 a3=ffffa4851fa0 items=0 ppid=2202 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:35.852939 kernel: audit: type=1327 audit(1696273115.846:724): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:58:35.846000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:58:35.859680 env[1141]: time="2023-10-02T18:58:35.859606533Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:58:35.860176 env[1141]: time="2023-10-02T18:58:35.860133493Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:58:35.860295 env[1141]: time="2023-10-02T18:58:35.860272893Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:58:35.860554 env[1141]: time="2023-10-02T18:58:35.860519773Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757 pid=2575 runtime=io.containerd.runc.v2 Oct 2 18:58:35.878481 systemd[1]: Started cri-containerd-5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757.scope. Oct 2 18:58:35.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.900642 kernel: audit: type=1400 audit(1696273115.894:725): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.900709 kernel: audit: type=1400 audit(1696273115.894:726): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.900824 kernel: audit: type=1400 audit(1696273115.894:727): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.902430 kernel: audit: type=1400 audit(1696273115.894:728): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.906283 kernel: audit: type=1400 audit(1696273115.894:729): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.906348 kernel: audit: type=1400 audit(1696273115.894:730): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.906471 systemd-resolved[1087]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 18:58:35.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.909990 kernel: audit: type=1400 audit(1696273115.894:731): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.896000 audit: BPF prog-id=98 op=LOAD Oct 2 18:58:35.897000 audit[2585]: AVC avc: denied { bpf } for pid=2585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.897000 audit[2585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2575 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:35.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566633533646161393939323138616338646661323062613136303939 Oct 2 18:58:35.897000 audit[2585]: AVC avc: denied { perfmon } for pid=2585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.897000 audit[2585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2575 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:35.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566633533646161393939323138616338646661323062613136303939 Oct 2 18:58:35.897000 audit[2585]: AVC avc: denied { bpf } for pid=2585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.897000 audit[2585]: AVC avc: denied { bpf } for pid=2585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.897000 audit[2585]: AVC avc: denied { bpf } for pid=2585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.897000 audit[2585]: AVC avc: denied { perfmon } for pid=2585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.897000 audit[2585]: AVC avc: denied { perfmon } for pid=2585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.897000 audit[2585]: AVC avc: denied { perfmon } for pid=2585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.897000 audit[2585]: AVC avc: denied { perfmon } for pid=2585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.897000 audit[2585]: AVC avc: denied { perfmon } for pid=2585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.897000 audit[2585]: AVC avc: denied { bpf } for pid=2585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.897000 audit[2585]: AVC avc: denied { bpf } for pid=2585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.897000 audit: BPF prog-id=99 op=LOAD Oct 2 18:58:35.897000 audit[2585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2575 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:35.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566633533646161393939323138616338646661323062613136303939 Oct 2 18:58:35.899000 audit[2585]: AVC avc: denied { bpf } for pid=2585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.899000 audit[2585]: AVC avc: denied { bpf } for pid=2585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.899000 audit[2585]: AVC avc: denied { perfmon } for pid=2585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.899000 audit[2585]: AVC avc: denied { perfmon } for pid=2585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.899000 audit[2585]: AVC avc: denied { perfmon } for pid=2585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.899000 audit[2585]: AVC avc: denied { perfmon } for pid=2585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.899000 audit[2585]: AVC avc: denied { perfmon } for pid=2585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.899000 audit[2585]: AVC avc: denied { bpf } for pid=2585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.899000 audit[2585]: AVC avc: denied { bpf } for pid=2585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.899000 audit: BPF prog-id=100 op=LOAD Oct 2 18:58:35.899000 audit[2585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2575 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:35.899000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566633533646161393939323138616338646661323062613136303939 Oct 2 18:58:35.901000 audit: BPF prog-id=100 op=UNLOAD Oct 2 18:58:35.901000 audit: BPF prog-id=99 op=UNLOAD Oct 2 18:58:35.901000 audit[2585]: AVC avc: denied { bpf } for pid=2585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.901000 audit[2585]: AVC avc: denied { bpf } for pid=2585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.901000 audit[2585]: AVC avc: denied { bpf } for pid=2585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.901000 audit[2585]: AVC avc: denied { perfmon } for pid=2585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.901000 audit[2585]: AVC avc: denied { perfmon } for pid=2585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.901000 audit[2585]: AVC avc: denied { perfmon } for pid=2585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.901000 audit[2585]: AVC avc: denied { perfmon } for pid=2585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.901000 audit[2585]: AVC avc: denied { perfmon } for pid=2585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.901000 audit[2585]: AVC avc: denied { bpf } for pid=2585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.901000 audit[2585]: AVC avc: denied { bpf } for pid=2585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:35.901000 audit: BPF prog-id=101 op=LOAD Oct 2 18:58:35.901000 audit[2585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2575 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:35.901000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566633533646161393939323138616338646661323062613136303939 Oct 2 18:58:35.928624 env[1141]: time="2023-10-02T18:58:35.928577093Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-k67kc,Uid:e54d74ec-ac48-4114-a543-f8eb4c1e1cd5,Namespace:calico-system,Attempt:1,} returns sandbox id \"5fc53daa999218ac8dfa20ba160997685c48ae233a38ddfd9eb29e1b87f07757\"" Oct 2 18:58:35.930109 env[1141]: time="2023-10-02T18:58:35.930041773Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 18:58:36.086579 env[1141]: time="2023-10-02T18:58:36.086511318Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 18:58:36.087320 env[1141]: time="2023-10-02T18:58:36.087279242Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 18:58:36.087733 kubelet[1438]: E1002 18:58:36.087541 1438 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 18:58:36.087733 kubelet[1438]: E1002 18:58:36.087591 1438 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 18:58:36.087908 kubelet[1438]: E1002 18:58:36.087801 1438 kuberuntime_manager.go:1212] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-p6kxd,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod csi-node-driver-k67kc_calico-system(e54d74ec-ac48-4114-a543-f8eb4c1e1cd5): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 18:58:36.088662 env[1141]: time="2023-10-02T18:58:36.088626328Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 18:58:36.244512 env[1141]: time="2023-10-02T18:58:36.244378511Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 18:58:36.245373 env[1141]: time="2023-10-02T18:58:36.245327955Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 18:58:36.245811 kubelet[1438]: E1002 18:58:36.245573 1438 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 18:58:36.245811 kubelet[1438]: E1002 18:58:36.245629 1438 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 18:58:36.245811 kubelet[1438]: E1002 18:58:36.245710 1438 kuberuntime_manager.go:1212] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-p6kxd,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod csi-node-driver-k67kc_calico-system(e54d74ec-ac48-4114-a543-f8eb4c1e1cd5): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 18:58:36.245811 kubelet[1438]: E1002 18:58:36.245759 1438 pod_workers.go:1294] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-k67kc" podUID=e54d74ec-ac48-4114-a543-f8eb4c1e1cd5 Oct 2 18:58:36.333097 kubelet[1438]: E1002 18:58:36.333040 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:36.588510 kubelet[1438]: E1002 18:58:36.588406 1438 pod_workers.go:1294] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-k67kc" podUID=e54d74ec-ac48-4114-a543-f8eb4c1e1cd5 Oct 2 18:58:36.870185 systemd-networkd[1046]: calibd4544d0b42: Gained IPv6LL Oct 2 18:58:37.333250 kubelet[1438]: E1002 18:58:37.333155 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:37.531412 env[1141]: time="2023-10-02T18:58:37.531366133Z" level=info msg="StopPodSandbox for \"bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d\"" Oct 2 18:58:37.590342 kubelet[1438]: E1002 18:58:37.590244 1438 pod_workers.go:1294] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-k67kc" podUID=e54d74ec-ac48-4114-a543-f8eb4c1e1cd5 Oct 2 18:58:37.609962 env[1141]: 2023-10-02 18:58:37.572 [INFO][2626] k8s.go 576: Cleaning up netns ContainerID="bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d" Oct 2 18:58:37.609962 env[1141]: 2023-10-02 18:58:37.572 [INFO][2626] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d" iface="eth0" netns="/var/run/netns/cni-0292cfef-48d4-93cc-0701-37c0f3f24fe2" Oct 2 18:58:37.609962 env[1141]: 2023-10-02 18:58:37.573 [INFO][2626] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d" iface="eth0" netns="/var/run/netns/cni-0292cfef-48d4-93cc-0701-37c0f3f24fe2" Oct 2 18:58:37.609962 env[1141]: 2023-10-02 18:58:37.573 [INFO][2626] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d" iface="eth0" netns="/var/run/netns/cni-0292cfef-48d4-93cc-0701-37c0f3f24fe2" Oct 2 18:58:37.609962 env[1141]: 2023-10-02 18:58:37.573 [INFO][2626] k8s.go 583: Releasing IP address(es) ContainerID="bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d" Oct 2 18:58:37.609962 env[1141]: 2023-10-02 18:58:37.573 [INFO][2626] utils.go 196: Calico CNI releasing IP address ContainerID="bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d" Oct 2 18:58:37.609962 env[1141]: 2023-10-02 18:58:37.593 [INFO][2633] ipam_plugin.go 416: Releasing address using handleID ContainerID="bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d" HandleID="k8s-pod-network.bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d" Workload="10.0.0.73-k8s-nginx--deployment--845c78c8b9--bnshg-eth0" Oct 2 18:58:37.609962 env[1141]: time="2023-10-02T18:58:37Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:58:37.609962 env[1141]: time="2023-10-02T18:58:37Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:58:37.609962 env[1141]: 2023-10-02 18:58:37.606 [WARNING][2633] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d" HandleID="k8s-pod-network.bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d" Workload="10.0.0.73-k8s-nginx--deployment--845c78c8b9--bnshg-eth0" Oct 2 18:58:37.609962 env[1141]: 2023-10-02 18:58:37.606 [INFO][2633] ipam_plugin.go 444: Releasing address using workloadID ContainerID="bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d" HandleID="k8s-pod-network.bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d" Workload="10.0.0.73-k8s-nginx--deployment--845c78c8b9--bnshg-eth0" Oct 2 18:58:37.609962 env[1141]: time="2023-10-02T18:58:37Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:58:37.609962 env[1141]: 2023-10-02 18:58:37.608 [INFO][2626] k8s.go 589: Teardown processing complete. ContainerID="bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d" Oct 2 18:58:37.611794 env[1141]: time="2023-10-02T18:58:37.611729273Z" level=info msg="TearDown network for sandbox \"bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d\" successfully" Oct 2 18:58:37.611794 env[1141]: time="2023-10-02T18:58:37.611775553Z" level=info msg="StopPodSandbox for \"bc87b543c9830058e54faa5b27bb674454fd9aeb8a4e3089d20a10af9906102d\" returns successfully" Oct 2 18:58:37.611255 systemd[1]: run-netns-cni\x2d0292cfef\x2d48d4\x2d93cc\x2d0701\x2d37c0f3f24fe2.mount: Deactivated successfully. Oct 2 18:58:37.612636 env[1141]: time="2023-10-02T18:58:37.612589237Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:nginx-deployment-845c78c8b9-bnshg,Uid:91669085-44a9-4de1-a9f0-604b17655441,Namespace:default,Attempt:1,}" Oct 2 18:58:37.729472 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 18:58:37.729563 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali307b081c35f: link becomes ready Oct 2 18:58:37.737002 systemd-networkd[1046]: cali307b081c35f: Link UP Oct 2 18:58:37.737013 systemd-networkd[1046]: cali307b081c35f: Gained carrier Oct 2 18:58:37.746473 env[1141]: 2023-10-02 18:58:37.659 [INFO][2641] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {10.0.0.73-k8s-nginx--deployment--845c78c8b9--bnshg-eth0 nginx-deployment-845c78c8b9- default 91669085-44a9-4de1-a9f0-604b17655441 2215 0 2023-10-02 18:58:22 +0000 UTC map[app:nginx pod-template-hash:845c78c8b9 projectcalico.org/namespace:default projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s 10.0.0.73 nginx-deployment-845c78c8b9-bnshg eth0 default [] [] [kns.default ksa.default.default] cali307b081c35f [] []}} ContainerID="ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb" Namespace="default" Pod="nginx-deployment-845c78c8b9-bnshg" WorkloadEndpoint="10.0.0.73-k8s-nginx--deployment--845c78c8b9--bnshg-" Oct 2 18:58:37.746473 env[1141]: 2023-10-02 18:58:37.659 [INFO][2641] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb" Namespace="default" Pod="nginx-deployment-845c78c8b9-bnshg" WorkloadEndpoint="10.0.0.73-k8s-nginx--deployment--845c78c8b9--bnshg-eth0" Oct 2 18:58:37.746473 env[1141]: 2023-10-02 18:58:37.683 [INFO][2655] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb" HandleID="k8s-pod-network.ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb" Workload="10.0.0.73-k8s-nginx--deployment--845c78c8b9--bnshg-eth0" Oct 2 18:58:37.746473 env[1141]: 2023-10-02 18:58:37.696 [INFO][2655] ipam_plugin.go 269: Auto assigning IP ContainerID="ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb" HandleID="k8s-pod-network.ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb" Workload="10.0.0.73-k8s-nginx--deployment--845c78c8b9--bnshg-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004de70), Attrs:map[string]string{"namespace":"default", "node":"10.0.0.73", "pod":"nginx-deployment-845c78c8b9-bnshg", "timestamp":"2023-10-02 18:58:37.683443737 +0000 UTC"}, Hostname:"10.0.0.73", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 18:58:37.746473 env[1141]: time="2023-10-02T18:58:37Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:58:37.746473 env[1141]: time="2023-10-02T18:58:37Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:58:37.746473 env[1141]: 2023-10-02 18:58:37.696 [INFO][2655] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host '10.0.0.73' Oct 2 18:58:37.746473 env[1141]: 2023-10-02 18:58:37.698 [INFO][2655] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb" host="10.0.0.73" Oct 2 18:58:37.746473 env[1141]: 2023-10-02 18:58:37.706 [INFO][2655] ipam.go 372: Looking up existing affinities for host host="10.0.0.73" Oct 2 18:58:37.746473 env[1141]: 2023-10-02 18:58:37.711 [INFO][2655] ipam.go 489: Trying affinity for 192.168.74.192/26 host="10.0.0.73" Oct 2 18:58:37.746473 env[1141]: 2023-10-02 18:58:37.713 [INFO][2655] ipam.go 155: Attempting to load block cidr=192.168.74.192/26 host="10.0.0.73" Oct 2 18:58:37.746473 env[1141]: 2023-10-02 18:58:37.715 [INFO][2655] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.74.192/26 host="10.0.0.73" Oct 2 18:58:37.746473 env[1141]: 2023-10-02 18:58:37.715 [INFO][2655] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.74.192/26 handle="k8s-pod-network.ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb" host="10.0.0.73" Oct 2 18:58:37.746473 env[1141]: 2023-10-02 18:58:37.716 [INFO][2655] ipam.go 1682: Creating new handle: k8s-pod-network.ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb Oct 2 18:58:37.746473 env[1141]: 2023-10-02 18:58:37.720 [INFO][2655] ipam.go 1203: Writing block in order to claim IPs block=192.168.74.192/26 handle="k8s-pod-network.ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb" host="10.0.0.73" Oct 2 18:58:37.746473 env[1141]: 2023-10-02 18:58:37.725 [INFO][2655] ipam.go 1216: Successfully claimed IPs: [192.168.74.194/26] block=192.168.74.192/26 handle="k8s-pod-network.ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb" host="10.0.0.73" Oct 2 18:58:37.746473 env[1141]: 2023-10-02 18:58:37.725 [INFO][2655] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.74.194/26] handle="k8s-pod-network.ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb" host="10.0.0.73" Oct 2 18:58:37.746473 env[1141]: time="2023-10-02T18:58:37Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:58:37.746473 env[1141]: 2023-10-02 18:58:37.725 [INFO][2655] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.74.194/26] IPv6=[] ContainerID="ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb" HandleID="k8s-pod-network.ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb" Workload="10.0.0.73-k8s-nginx--deployment--845c78c8b9--bnshg-eth0" Oct 2 18:58:37.747805 env[1141]: 2023-10-02 18:58:37.727 [INFO][2641] k8s.go 383: Populated endpoint ContainerID="ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb" Namespace="default" Pod="nginx-deployment-845c78c8b9-bnshg" WorkloadEndpoint="10.0.0.73-k8s-nginx--deployment--845c78c8b9--bnshg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.73-k8s-nginx--deployment--845c78c8b9--bnshg-eth0", GenerateName:"nginx-deployment-845c78c8b9-", Namespace:"default", SelfLink:"", UID:"91669085-44a9-4de1-a9f0-604b17655441", ResourceVersion:"2215", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 58, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app":"nginx", "pod-template-hash":"845c78c8b9", "projectcalico.org/namespace":"default", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.73", ContainerID:"", Pod:"nginx-deployment-845c78c8b9-bnshg", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.74.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.default", "ksa.default.default"}, InterfaceName:"cali307b081c35f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:58:37.747805 env[1141]: 2023-10-02 18:58:37.727 [INFO][2641] k8s.go 384: Calico CNI using IPs: [192.168.74.194/32] ContainerID="ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb" Namespace="default" Pod="nginx-deployment-845c78c8b9-bnshg" WorkloadEndpoint="10.0.0.73-k8s-nginx--deployment--845c78c8b9--bnshg-eth0" Oct 2 18:58:37.747805 env[1141]: 2023-10-02 18:58:37.727 [INFO][2641] dataplane_linux.go 68: Setting the host side veth name to cali307b081c35f ContainerID="ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb" Namespace="default" Pod="nginx-deployment-845c78c8b9-bnshg" WorkloadEndpoint="10.0.0.73-k8s-nginx--deployment--845c78c8b9--bnshg-eth0" Oct 2 18:58:37.747805 env[1141]: 2023-10-02 18:58:37.729 [INFO][2641] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb" Namespace="default" Pod="nginx-deployment-845c78c8b9-bnshg" WorkloadEndpoint="10.0.0.73-k8s-nginx--deployment--845c78c8b9--bnshg-eth0" Oct 2 18:58:37.747805 env[1141]: 2023-10-02 18:58:37.736 [INFO][2641] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb" Namespace="default" Pod="nginx-deployment-845c78c8b9-bnshg" WorkloadEndpoint="10.0.0.73-k8s-nginx--deployment--845c78c8b9--bnshg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.73-k8s-nginx--deployment--845c78c8b9--bnshg-eth0", GenerateName:"nginx-deployment-845c78c8b9-", Namespace:"default", SelfLink:"", UID:"91669085-44a9-4de1-a9f0-604b17655441", ResourceVersion:"2215", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 58, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app":"nginx", "pod-template-hash":"845c78c8b9", "projectcalico.org/namespace":"default", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.73", ContainerID:"ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb", Pod:"nginx-deployment-845c78c8b9-bnshg", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.74.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.default", "ksa.default.default"}, InterfaceName:"cali307b081c35f", MAC:"c2:19:52:e3:ad:53", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:58:37.747805 env[1141]: 2023-10-02 18:58:37.741 [INFO][2641] k8s.go 489: Wrote updated endpoint to datastore ContainerID="ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb" Namespace="default" Pod="nginx-deployment-845c78c8b9-bnshg" WorkloadEndpoint="10.0.0.73-k8s-nginx--deployment--845c78c8b9--bnshg-eth0" Oct 2 18:58:37.758000 audit[2680]: NETFILTER_CFG table=filter:70 family=2 entries=40 op=nft_register_chain pid=2680 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:58:37.758000 audit[2680]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21064 a0=3 a1=ffffcf933a10 a2=0 a3=ffff9dafdfa0 items=0 ppid=2202 pid=2680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:37.758000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:58:37.767744 env[1141]: time="2023-10-02T18:58:37.767679573Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:58:37.767885 env[1141]: time="2023-10-02T18:58:37.767718293Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:58:37.767885 env[1141]: time="2023-10-02T18:58:37.767728813Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:58:37.768125 env[1141]: time="2023-10-02T18:58:37.768038335Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb pid=2689 runtime=io.containerd.runc.v2 Oct 2 18:58:37.785093 systemd[1]: Started cri-containerd-ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb.scope. Oct 2 18:58:37.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.808000 audit: BPF prog-id=102 op=LOAD Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2689 pid=2699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:37.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563386662313436393430643333376133613939396231626535646163 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2689 pid=2699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:37.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563386662313436393430643333376133613939396231626535646163 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit: BPF prog-id=103 op=LOAD Oct 2 18:58:37.809000 audit[2699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2689 pid=2699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:37.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563386662313436393430643333376133613939396231626535646163 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit: BPF prog-id=104 op=LOAD Oct 2 18:58:37.809000 audit[2699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2689 pid=2699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:37.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563386662313436393430643333376133613939396231626535646163 Oct 2 18:58:37.809000 audit: BPF prog-id=104 op=UNLOAD Oct 2 18:58:37.809000 audit: BPF prog-id=103 op=UNLOAD Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { perfmon } for pid=2699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit[2699]: AVC avc: denied { bpf } for pid=2699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:37.809000 audit: BPF prog-id=105 op=LOAD Oct 2 18:58:37.809000 audit[2699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2689 pid=2699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:37.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563386662313436393430643333376133613939396231626535646163 Oct 2 18:58:37.810924 systemd-resolved[1087]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 18:58:37.828269 env[1141]: time="2023-10-02T18:58:37.828224029Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:nginx-deployment-845c78c8b9-bnshg,Uid:91669085-44a9-4de1-a9f0-604b17655441,Namespace:default,Attempt:1,} returns sandbox id \"ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb\"" Oct 2 18:58:37.830029 env[1141]: time="2023-10-02T18:58:37.829991717Z" level=info msg="PullImage \"ghcr.io/flatcar/nginx:latest\"" Oct 2 18:58:38.333888 kubelet[1438]: E1002 18:58:38.333833 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:38.611359 systemd[1]: run-containerd-runc-k8s.io-ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb-runc.w2yqCE.mount: Deactivated successfully. Oct 2 18:58:38.795973 kubelet[1438]: I1002 18:58:38.793522 1438 topology_manager.go:212] "Topology Admit Handler" Oct 2 18:58:38.807127 systemd[1]: Created slice kubepods-besteffort-pod359e9679_9a33_4ff8_ba9d_7f0c9eb25dc6.slice. Oct 2 18:58:38.808580 kubelet[1438]: I1002 18:58:38.808524 1438 topology_manager.go:212] "Topology Admit Handler" Oct 2 18:58:38.818472 systemd[1]: Created slice kubepods-besteffort-podd94ade93_0deb_45b6_b474_f36bdb618021.slice. Oct 2 18:58:38.879000 audit[2726]: NETFILTER_CFG table=filter:71 family=2 entries=9 op=nft_register_rule pid=2726 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:58:38.879000 audit[2726]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=fffffcd595d0 a2=0 a3=ffffa0c5c6c0 items=0 ppid=1634 pid=2726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:38.879000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:58:38.884000 audit[2726]: NETFILTER_CFG table=nat:72 family=2 entries=20 op=nft_register_rule pid=2726 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:58:38.884000 audit[2726]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=fffffcd595d0 a2=0 a3=ffffa0c5c6c0 items=0 ppid=1634 pid=2726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:38.884000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:58:38.895000 audit[2729]: NETFILTER_CFG table=filter:73 family=2 entries=10 op=nft_register_rule pid=2729 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:58:38.895000 audit[2729]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffd5b66cc0 a2=0 a3=ffffa23816c0 items=0 ppid=1634 pid=2729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:38.895000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:58:38.896000 audit[2729]: NETFILTER_CFG table=nat:74 family=2 entries=20 op=nft_register_rule pid=2729 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:58:38.896000 audit[2729]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=ffffd5b66cc0 a2=0 a3=ffffa23816c0 items=0 ppid=1634 pid=2729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:38.896000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:58:38.918269 systemd-networkd[1046]: cali307b081c35f: Gained IPv6LL Oct 2 18:58:38.973620 kubelet[1438]: I1002 18:58:38.973532 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-q474k\" (UniqueName: \"kubernetes.io/projected/d94ade93-0deb-45b6-b474-f36bdb618021-kube-api-access-q474k\") pod \"calico-apiserver-78b859fb77-78756\" (UID: \"d94ade93-0deb-45b6-b474-f36bdb618021\") " pod="calico-apiserver/calico-apiserver-78b859fb77-78756" Oct 2 18:58:38.973748 kubelet[1438]: I1002 18:58:38.973689 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/d94ade93-0deb-45b6-b474-f36bdb618021-calico-apiserver-certs\") pod \"calico-apiserver-78b859fb77-78756\" (UID: \"d94ade93-0deb-45b6-b474-f36bdb618021\") " pod="calico-apiserver/calico-apiserver-78b859fb77-78756" Oct 2 18:58:38.973748 kubelet[1438]: I1002 18:58:38.973746 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/359e9679-9a33-4ff8-ba9d-7f0c9eb25dc6-calico-apiserver-certs\") pod \"calico-apiserver-78b859fb77-clq22\" (UID: \"359e9679-9a33-4ff8-ba9d-7f0c9eb25dc6\") " pod="calico-apiserver/calico-apiserver-78b859fb77-clq22" Oct 2 18:58:38.973821 kubelet[1438]: I1002 18:58:38.973769 1438 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-s4gmv\" (UniqueName: \"kubernetes.io/projected/359e9679-9a33-4ff8-ba9d-7f0c9eb25dc6-kube-api-access-s4gmv\") pod \"calico-apiserver-78b859fb77-clq22\" (UID: \"359e9679-9a33-4ff8-ba9d-7f0c9eb25dc6\") " pod="calico-apiserver/calico-apiserver-78b859fb77-clq22" Oct 2 18:58:39.115255 env[1141]: time="2023-10-02T18:58:39.115205914Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-78b859fb77-clq22,Uid:359e9679-9a33-4ff8-ba9d-7f0c9eb25dc6,Namespace:calico-apiserver,Attempt:0,}" Oct 2 18:58:39.121903 env[1141]: time="2023-10-02T18:58:39.121860899Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-78b859fb77-78756,Uid:d94ade93-0deb-45b6-b474-f36bdb618021,Namespace:calico-apiserver,Attempt:0,}" Oct 2 18:58:39.249533 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 18:58:39.249671 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib6323727f73: link becomes ready Oct 2 18:58:39.261839 systemd-networkd[1046]: calib6323727f73: Link UP Oct 2 18:58:39.261846 systemd-networkd[1046]: calib6323727f73: Gained carrier Oct 2 18:58:39.276246 env[1141]: 2023-10-02 18:58:39.170 [INFO][2748] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {10.0.0.73-k8s-calico--apiserver--78b859fb77--78756-eth0 calico-apiserver-78b859fb77- calico-apiserver d94ade93-0deb-45b6-b474-f36bdb618021 2272 0 2023-10-02 18:58:38 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:78b859fb77 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s 10.0.0.73 calico-apiserver-78b859fb77-78756 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calib6323727f73 [] []}} ContainerID="cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6" Namespace="calico-apiserver" Pod="calico-apiserver-78b859fb77-78756" WorkloadEndpoint="10.0.0.73-k8s-calico--apiserver--78b859fb77--78756-" Oct 2 18:58:39.276246 env[1141]: 2023-10-02 18:58:39.170 [INFO][2748] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6" Namespace="calico-apiserver" Pod="calico-apiserver-78b859fb77-78756" WorkloadEndpoint="10.0.0.73-k8s-calico--apiserver--78b859fb77--78756-eth0" Oct 2 18:58:39.276246 env[1141]: 2023-10-02 18:58:39.202 [INFO][2763] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6" HandleID="k8s-pod-network.cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6" Workload="10.0.0.73-k8s-calico--apiserver--78b859fb77--78756-eth0" Oct 2 18:58:39.276246 env[1141]: 2023-10-02 18:58:39.214 [INFO][2763] ipam_plugin.go 269: Auto assigning IP ContainerID="cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6" HandleID="k8s-pod-network.cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6" Workload="10.0.0.73-k8s-calico--apiserver--78b859fb77--78756-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001d9160), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"10.0.0.73", "pod":"calico-apiserver-78b859fb77-78756", "timestamp":"2023-10-02 18:58:39.202505519 +0000 UTC"}, Hostname:"10.0.0.73", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 18:58:39.276246 env[1141]: time="2023-10-02T18:58:39Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:58:39.276246 env[1141]: time="2023-10-02T18:58:39Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:58:39.276246 env[1141]: 2023-10-02 18:58:39.215 [INFO][2763] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host '10.0.0.73' Oct 2 18:58:39.276246 env[1141]: 2023-10-02 18:58:39.217 [INFO][2763] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6" host="10.0.0.73" Oct 2 18:58:39.276246 env[1141]: 2023-10-02 18:58:39.221 [INFO][2763] ipam.go 372: Looking up existing affinities for host host="10.0.0.73" Oct 2 18:58:39.276246 env[1141]: 2023-10-02 18:58:39.224 [INFO][2763] ipam.go 489: Trying affinity for 192.168.74.192/26 host="10.0.0.73" Oct 2 18:58:39.276246 env[1141]: 2023-10-02 18:58:39.233 [INFO][2763] ipam.go 155: Attempting to load block cidr=192.168.74.192/26 host="10.0.0.73" Oct 2 18:58:39.276246 env[1141]: 2023-10-02 18:58:39.235 [INFO][2763] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.74.192/26 host="10.0.0.73" Oct 2 18:58:39.276246 env[1141]: 2023-10-02 18:58:39.235 [INFO][2763] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.74.192/26 handle="k8s-pod-network.cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6" host="10.0.0.73" Oct 2 18:58:39.276246 env[1141]: 2023-10-02 18:58:39.237 [INFO][2763] ipam.go 1682: Creating new handle: k8s-pod-network.cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6 Oct 2 18:58:39.276246 env[1141]: 2023-10-02 18:58:39.240 [INFO][2763] ipam.go 1203: Writing block in order to claim IPs block=192.168.74.192/26 handle="k8s-pod-network.cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6" host="10.0.0.73" Oct 2 18:58:39.276246 env[1141]: 2023-10-02 18:58:39.245 [INFO][2763] ipam.go 1216: Successfully claimed IPs: [192.168.74.195/26] block=192.168.74.192/26 handle="k8s-pod-network.cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6" host="10.0.0.73" Oct 2 18:58:39.276246 env[1141]: 2023-10-02 18:58:39.245 [INFO][2763] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.74.195/26] handle="k8s-pod-network.cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6" host="10.0.0.73" Oct 2 18:58:39.276246 env[1141]: time="2023-10-02T18:58:39Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:58:39.276246 env[1141]: 2023-10-02 18:58:39.245 [INFO][2763] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.74.195/26] IPv6=[] ContainerID="cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6" HandleID="k8s-pod-network.cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6" Workload="10.0.0.73-k8s-calico--apiserver--78b859fb77--78756-eth0" Oct 2 18:58:39.282283 env[1141]: 2023-10-02 18:58:39.247 [INFO][2748] k8s.go 383: Populated endpoint ContainerID="cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6" Namespace="calico-apiserver" Pod="calico-apiserver-78b859fb77-78756" WorkloadEndpoint="10.0.0.73-k8s-calico--apiserver--78b859fb77--78756-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.73-k8s-calico--apiserver--78b859fb77--78756-eth0", GenerateName:"calico-apiserver-78b859fb77-", Namespace:"calico-apiserver", SelfLink:"", UID:"d94ade93-0deb-45b6-b474-f36bdb618021", ResourceVersion:"2272", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 58, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"78b859fb77", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.73", ContainerID:"", Pod:"calico-apiserver-78b859fb77-78756", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.74.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib6323727f73", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:58:39.282283 env[1141]: 2023-10-02 18:58:39.247 [INFO][2748] k8s.go 384: Calico CNI using IPs: [192.168.74.195/32] ContainerID="cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6" Namespace="calico-apiserver" Pod="calico-apiserver-78b859fb77-78756" WorkloadEndpoint="10.0.0.73-k8s-calico--apiserver--78b859fb77--78756-eth0" Oct 2 18:58:39.282283 env[1141]: 2023-10-02 18:58:39.247 [INFO][2748] dataplane_linux.go 68: Setting the host side veth name to calib6323727f73 ContainerID="cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6" Namespace="calico-apiserver" Pod="calico-apiserver-78b859fb77-78756" WorkloadEndpoint="10.0.0.73-k8s-calico--apiserver--78b859fb77--78756-eth0" Oct 2 18:58:39.282283 env[1141]: 2023-10-02 18:58:39.249 [INFO][2748] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6" Namespace="calico-apiserver" Pod="calico-apiserver-78b859fb77-78756" WorkloadEndpoint="10.0.0.73-k8s-calico--apiserver--78b859fb77--78756-eth0" Oct 2 18:58:39.282283 env[1141]: 2023-10-02 18:58:39.261 [INFO][2748] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6" Namespace="calico-apiserver" Pod="calico-apiserver-78b859fb77-78756" WorkloadEndpoint="10.0.0.73-k8s-calico--apiserver--78b859fb77--78756-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.73-k8s-calico--apiserver--78b859fb77--78756-eth0", GenerateName:"calico-apiserver-78b859fb77-", Namespace:"calico-apiserver", SelfLink:"", UID:"d94ade93-0deb-45b6-b474-f36bdb618021", ResourceVersion:"2272", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 58, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"78b859fb77", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.73", ContainerID:"cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6", Pod:"calico-apiserver-78b859fb77-78756", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.74.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib6323727f73", MAC:"4e:ec:ef:bf:47:e8", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:58:39.282283 env[1141]: 2023-10-02 18:58:39.270 [INFO][2748] k8s.go 489: Wrote updated endpoint to datastore ContainerID="cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6" Namespace="calico-apiserver" Pod="calico-apiserver-78b859fb77-78756" WorkloadEndpoint="10.0.0.73-k8s-calico--apiserver--78b859fb77--78756-eth0" Oct 2 18:58:39.287000 audit[2792]: NETFILTER_CFG table=filter:75 family=2 entries=57 op=nft_register_chain pid=2792 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:58:39.287000 audit[2792]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=29768 a0=3 a1=ffffe004fe10 a2=0 a3=ffff980d3fa0 items=0 ppid=2202 pid=2792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:39.287000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:58:39.293079 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic546a161e44: link becomes ready Oct 2 18:58:39.301564 systemd-networkd[1046]: calic546a161e44: Link UP Oct 2 18:58:39.301570 systemd-networkd[1046]: calic546a161e44: Gained carrier Oct 2 18:58:39.304269 env[1141]: time="2023-10-02T18:58:39.303386374Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:58:39.304269 env[1141]: time="2023-10-02T18:58:39.303446015Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:58:39.304269 env[1141]: time="2023-10-02T18:58:39.303459535Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:58:39.304269 env[1141]: time="2023-10-02T18:58:39.303631335Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6 pid=2804 runtime=io.containerd.runc.v2 Oct 2 18:58:39.315950 env[1141]: 2023-10-02 18:58:39.170 [INFO][2736] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {10.0.0.73-k8s-calico--apiserver--78b859fb77--clq22-eth0 calico-apiserver-78b859fb77- calico-apiserver 359e9679-9a33-4ff8-ba9d-7f0c9eb25dc6 2265 0 2023-10-02 18:58:38 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:78b859fb77 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s 10.0.0.73 calico-apiserver-78b859fb77-clq22 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calic546a161e44 [] []}} ContainerID="9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d" Namespace="calico-apiserver" Pod="calico-apiserver-78b859fb77-clq22" WorkloadEndpoint="10.0.0.73-k8s-calico--apiserver--78b859fb77--clq22-" Oct 2 18:58:39.315950 env[1141]: 2023-10-02 18:58:39.170 [INFO][2736] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d" Namespace="calico-apiserver" Pod="calico-apiserver-78b859fb77-clq22" WorkloadEndpoint="10.0.0.73-k8s-calico--apiserver--78b859fb77--clq22-eth0" Oct 2 18:58:39.315950 env[1141]: 2023-10-02 18:58:39.209 [INFO][2764] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d" HandleID="k8s-pod-network.9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d" Workload="10.0.0.73-k8s-calico--apiserver--78b859fb77--clq22-eth0" Oct 2 18:58:39.315950 env[1141]: 2023-10-02 18:58:39.220 [INFO][2764] ipam_plugin.go 269: Auto assigning IP ContainerID="9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d" HandleID="k8s-pod-network.9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d" Workload="10.0.0.73-k8s-calico--apiserver--78b859fb77--clq22-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40005a3460), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"10.0.0.73", "pod":"calico-apiserver-78b859fb77-clq22", "timestamp":"2023-10-02 18:58:39.209471265 +0000 UTC"}, Hostname:"10.0.0.73", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 18:58:39.315950 env[1141]: time="2023-10-02T18:58:39Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:58:39.315950 env[1141]: time="2023-10-02T18:58:39Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:58:39.315950 env[1141]: 2023-10-02 18:58:39.245 [INFO][2764] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host '10.0.0.73' Oct 2 18:58:39.315950 env[1141]: 2023-10-02 18:58:39.250 [INFO][2764] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d" host="10.0.0.73" Oct 2 18:58:39.315950 env[1141]: 2023-10-02 18:58:39.255 [INFO][2764] ipam.go 372: Looking up existing affinities for host host="10.0.0.73" Oct 2 18:58:39.315950 env[1141]: 2023-10-02 18:58:39.259 [INFO][2764] ipam.go 489: Trying affinity for 192.168.74.192/26 host="10.0.0.73" Oct 2 18:58:39.315950 env[1141]: 2023-10-02 18:58:39.262 [INFO][2764] ipam.go 155: Attempting to load block cidr=192.168.74.192/26 host="10.0.0.73" Oct 2 18:58:39.315950 env[1141]: 2023-10-02 18:58:39.265 [INFO][2764] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.74.192/26 host="10.0.0.73" Oct 2 18:58:39.315950 env[1141]: 2023-10-02 18:58:39.265 [INFO][2764] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.74.192/26 handle="k8s-pod-network.9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d" host="10.0.0.73" Oct 2 18:58:39.315950 env[1141]: 2023-10-02 18:58:39.268 [INFO][2764] ipam.go 1682: Creating new handle: k8s-pod-network.9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d Oct 2 18:58:39.315950 env[1141]: 2023-10-02 18:58:39.272 [INFO][2764] ipam.go 1203: Writing block in order to claim IPs block=192.168.74.192/26 handle="k8s-pod-network.9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d" host="10.0.0.73" Oct 2 18:58:39.315950 env[1141]: 2023-10-02 18:58:39.283 [INFO][2764] ipam.go 1216: Successfully claimed IPs: [192.168.74.196/26] block=192.168.74.192/26 handle="k8s-pod-network.9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d" host="10.0.0.73" Oct 2 18:58:39.315950 env[1141]: 2023-10-02 18:58:39.283 [INFO][2764] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.74.196/26] handle="k8s-pod-network.9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d" host="10.0.0.73" Oct 2 18:58:39.315950 env[1141]: time="2023-10-02T18:58:39Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:58:39.315950 env[1141]: 2023-10-02 18:58:39.283 [INFO][2764] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.74.196/26] IPv6=[] ContainerID="9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d" HandleID="k8s-pod-network.9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d" Workload="10.0.0.73-k8s-calico--apiserver--78b859fb77--clq22-eth0" Oct 2 18:58:39.316586 env[1141]: 2023-10-02 18:58:39.290 [INFO][2736] k8s.go 383: Populated endpoint ContainerID="9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d" Namespace="calico-apiserver" Pod="calico-apiserver-78b859fb77-clq22" WorkloadEndpoint="10.0.0.73-k8s-calico--apiserver--78b859fb77--clq22-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.73-k8s-calico--apiserver--78b859fb77--clq22-eth0", GenerateName:"calico-apiserver-78b859fb77-", Namespace:"calico-apiserver", SelfLink:"", UID:"359e9679-9a33-4ff8-ba9d-7f0c9eb25dc6", ResourceVersion:"2265", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 58, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"78b859fb77", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.73", ContainerID:"", Pod:"calico-apiserver-78b859fb77-clq22", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.74.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic546a161e44", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:58:39.316586 env[1141]: 2023-10-02 18:58:39.290 [INFO][2736] k8s.go 384: Calico CNI using IPs: [192.168.74.196/32] ContainerID="9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d" Namespace="calico-apiserver" Pod="calico-apiserver-78b859fb77-clq22" WorkloadEndpoint="10.0.0.73-k8s-calico--apiserver--78b859fb77--clq22-eth0" Oct 2 18:58:39.316586 env[1141]: 2023-10-02 18:58:39.290 [INFO][2736] dataplane_linux.go 68: Setting the host side veth name to calic546a161e44 ContainerID="9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d" Namespace="calico-apiserver" Pod="calico-apiserver-78b859fb77-clq22" WorkloadEndpoint="10.0.0.73-k8s-calico--apiserver--78b859fb77--clq22-eth0" Oct 2 18:58:39.316586 env[1141]: 2023-10-02 18:58:39.293 [INFO][2736] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d" Namespace="calico-apiserver" Pod="calico-apiserver-78b859fb77-clq22" WorkloadEndpoint="10.0.0.73-k8s-calico--apiserver--78b859fb77--clq22-eth0" Oct 2 18:58:39.316586 env[1141]: 2023-10-02 18:58:39.302 [INFO][2736] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d" Namespace="calico-apiserver" Pod="calico-apiserver-78b859fb77-clq22" WorkloadEndpoint="10.0.0.73-k8s-calico--apiserver--78b859fb77--clq22-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.73-k8s-calico--apiserver--78b859fb77--clq22-eth0", GenerateName:"calico-apiserver-78b859fb77-", Namespace:"calico-apiserver", SelfLink:"", UID:"359e9679-9a33-4ff8-ba9d-7f0c9eb25dc6", ResourceVersion:"2265", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 58, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"78b859fb77", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"10.0.0.73", ContainerID:"9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d", Pod:"calico-apiserver-78b859fb77-clq22", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.74.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic546a161e44", MAC:"f6:3b:f7:ee:b0:38", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:58:39.316586 env[1141]: 2023-10-02 18:58:39.310 [INFO][2736] k8s.go 489: Wrote updated endpoint to datastore ContainerID="9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d" Namespace="calico-apiserver" Pod="calico-apiserver-78b859fb77-clq22" WorkloadEndpoint="10.0.0.73-k8s-calico--apiserver--78b859fb77--clq22-eth0" Oct 2 18:58:39.323000 audit[2837]: NETFILTER_CFG table=filter:76 family=2 entries=38 op=nft_register_chain pid=2837 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:58:39.323000 audit[2837]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20916 a0=3 a1=fffff457e1b0 a2=0 a3=ffff95535fa0 items=0 ppid=2202 pid=2837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:39.323000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:58:39.330476 systemd[1]: Started cri-containerd-cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6.scope. Oct 2 18:58:39.335204 kubelet[1438]: E1002 18:58:39.335151 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:39.338508 env[1141]: time="2023-10-02T18:58:39.338421985Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:58:39.338606 env[1141]: time="2023-10-02T18:58:39.338506265Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:58:39.338606 env[1141]: time="2023-10-02T18:58:39.338536825Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:58:39.338765 env[1141]: time="2023-10-02T18:58:39.338733546Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d pid=2845 runtime=io.containerd.runc.v2 Oct 2 18:58:39.355464 systemd[1]: Started cri-containerd-9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d.scope. Oct 2 18:58:39.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.378000 audit: BPF prog-id=106 op=LOAD Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2804 pid=2816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:39.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366343031336338376465346164326332353032333337656132373231 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2804 pid=2816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:39.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366343031336338376465346164326332353032333337656132373231 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit: BPF prog-id=107 op=LOAD Oct 2 18:58:39.379000 audit[2816]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2804 pid=2816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:39.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366343031336338376465346164326332353032333337656132373231 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit: BPF prog-id=108 op=LOAD Oct 2 18:58:39.379000 audit[2816]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2804 pid=2816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:39.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366343031336338376465346164326332353032333337656132373231 Oct 2 18:58:39.379000 audit: BPF prog-id=108 op=UNLOAD Oct 2 18:58:39.379000 audit: BPF prog-id=107 op=UNLOAD Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { perfmon } for pid=2816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit[2816]: AVC avc: denied { bpf } for pid=2816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.379000 audit: BPF prog-id=109 op=LOAD Oct 2 18:58:39.379000 audit[2816]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2804 pid=2816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:39.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366343031336338376465346164326332353032333337656132373231 Oct 2 18:58:39.382919 systemd-resolved[1087]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 18:58:39.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.389000 audit: BPF prog-id=110 op=LOAD Oct 2 18:58:39.390000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.390000 audit[2854]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2845 pid=2854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:39.390000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963663534626166366533383837303933303131303430313563363233 Oct 2 18:58:39.390000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.390000 audit[2854]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2845 pid=2854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:39.390000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963663534626166366533383837303933303131303430313563363233 Oct 2 18:58:39.390000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.390000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.390000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.390000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.390000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.390000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.390000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.390000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.390000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.390000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.390000 audit: BPF prog-id=111 op=LOAD Oct 2 18:58:39.390000 audit[2854]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2845 pid=2854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:39.390000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963663534626166366533383837303933303131303430313563363233 Oct 2 18:58:39.390000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.390000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.390000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.390000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.390000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.390000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.390000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.390000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.390000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.390000 audit: BPF prog-id=112 op=LOAD Oct 2 18:58:39.390000 audit[2854]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2845 pid=2854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:39.390000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963663534626166366533383837303933303131303430313563363233 Oct 2 18:58:39.391000 audit: BPF prog-id=112 op=UNLOAD Oct 2 18:58:39.391000 audit: BPF prog-id=111 op=UNLOAD Oct 2 18:58:39.391000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.391000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.391000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.391000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.391000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.391000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.391000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.391000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.391000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.391000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:39.391000 audit: BPF prog-id=113 op=LOAD Oct 2 18:58:39.391000 audit[2854]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2845 pid=2854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:39.391000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963663534626166366533383837303933303131303430313563363233 Oct 2 18:58:39.392909 systemd-resolved[1087]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 18:58:39.417347 env[1141]: time="2023-10-02T18:58:39.417304438Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-78b859fb77-clq22,Uid:359e9679-9a33-4ff8-ba9d-7f0c9eb25dc6,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"9cf54baf6e388709301104015c623be6655041a6f4dac1a2dfbacc3ebab4bb1d\"" Oct 2 18:58:39.418197 env[1141]: time="2023-10-02T18:58:39.418168241Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-78b859fb77-78756,Uid:d94ade93-0deb-45b6-b474-f36bdb618021,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"cf4013c87de4ad2c2502337ea272137163f2113df897f7ab683d09a0a6d05fe6\"" Oct 2 18:58:39.946621 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount40534650.mount: Deactivated successfully. Oct 2 18:58:40.336299 kubelet[1438]: E1002 18:58:40.336197 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:40.645249 systemd-networkd[1046]: calib6323727f73: Gained IPv6LL Oct 2 18:58:40.858463 env[1141]: time="2023-10-02T18:58:40.858410960Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/nginx:latest,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:40.859860 env[1141]: time="2023-10-02T18:58:40.859825845Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7a57d753be2d9e69d7787326e21137e5f57448955d7294cea9891e593fc97821,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:40.861799 env[1141]: time="2023-10-02T18:58:40.861772292Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/nginx:latest,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:40.863940 env[1141]: time="2023-10-02T18:58:40.863899819Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/nginx@sha256:637f6b877b0a51c456b44ec74046864b5131a87cb1c4536f11170201073027cf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:58:40.864495 env[1141]: time="2023-10-02T18:58:40.864461981Z" level=info msg="PullImage \"ghcr.io/flatcar/nginx:latest\" returns image reference \"sha256:7a57d753be2d9e69d7787326e21137e5f57448955d7294cea9891e593fc97821\"" Oct 2 18:58:40.865002 env[1141]: time="2023-10-02T18:58:40.864978903Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 18:58:40.866426 env[1141]: time="2023-10-02T18:58:40.866399908Z" level=info msg="CreateContainer within sandbox \"ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb\" for container &ContainerMetadata{Name:nginx,Attempt:0,}" Oct 2 18:58:40.883213 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1173444948.mount: Deactivated successfully. Oct 2 18:58:40.886336 env[1141]: time="2023-10-02T18:58:40.886293817Z" level=info msg="CreateContainer within sandbox \"ec8fb146940d337a3a999b1be5dac4c3787c0e40c2ac856759e9ddf309f873eb\" for &ContainerMetadata{Name:nginx,Attempt:0,} returns container id \"0e080c28d3dda1dbd338d0cd455d31327a228a964c323ec83b75b8887145444e\"" Oct 2 18:58:40.886964 env[1141]: time="2023-10-02T18:58:40.886933940Z" level=info msg="StartContainer for \"0e080c28d3dda1dbd338d0cd455d31327a228a964c323ec83b75b8887145444e\"" Oct 2 18:58:40.902952 systemd[1]: Started cri-containerd-0e080c28d3dda1dbd338d0cd455d31327a228a964c323ec83b75b8887145444e.scope. Oct 2 18:58:40.930784 kernel: kauditd_printk_skb: 242 callbacks suppressed Oct 2 18:58:40.930872 kernel: audit: type=1400 audit(1696273120.926:804): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.930911 kernel: audit: type=1400 audit(1696273120.926:805): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.933777 kernel: audit: type=1400 audit(1696273120.926:806): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.933841 kernel: audit: type=1400 audit(1696273120.926:807): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.935539 kernel: audit: type=1400 audit(1696273120.926:808): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.937295 kernel: audit: type=1400 audit(1696273120.926:809): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.940708 kernel: audit: type=1400 audit(1696273120.926:810): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.940764 kernel: audit: type=1400 audit(1696273120.926:811): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.943935 kernel: audit: type=1400 audit(1696273120.926:812): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.946184 kernel: audit: type=1400 audit(1696273120.927:813): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.927000 audit: BPF prog-id=114 op=LOAD Oct 2 18:58:40.929000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.929000 audit[2904]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=2689 pid=2904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:40.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065303830633238643364646131646264333338643063643435356433 Oct 2 18:58:40.929000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.929000 audit[2904]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2689 pid=2904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:40.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065303830633238643364646131646264333338643063643435356433 Oct 2 18:58:40.929000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.929000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.929000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.929000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.929000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.929000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.929000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.929000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.929000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.929000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.929000 audit: BPF prog-id=115 op=LOAD Oct 2 18:58:40.929000 audit[2904]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2689 pid=2904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:40.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065303830633238643364646131646264333338643063643435356433 Oct 2 18:58:40.930000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.930000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.930000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.930000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.930000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.930000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.930000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.930000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.930000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.930000 audit: BPF prog-id=116 op=LOAD Oct 2 18:58:40.930000 audit[2904]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2689 pid=2904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:40.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065303830633238643364646131646264333338643063643435356433 Oct 2 18:58:40.932000 audit: BPF prog-id=116 op=UNLOAD Oct 2 18:58:40.932000 audit: BPF prog-id=115 op=UNLOAD Oct 2 18:58:40.932000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.932000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.932000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.932000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.932000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.932000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.932000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.932000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.932000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.932000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:58:40.932000 audit: BPF prog-id=117 op=LOAD Oct 2 18:58:40.932000 audit[2904]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2689 pid=2904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:40.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065303830633238643364646131646264333338643063643435356433 Oct 2 18:58:40.961184 env[1141]: time="2023-10-02T18:58:40.961106038Z" level=info msg="StartContainer for \"0e080c28d3dda1dbd338d0cd455d31327a228a964c323ec83b75b8887145444e\" returns successfully" Oct 2 18:58:41.016838 env[1141]: time="2023-10-02T18:58:41.016769389Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 18:58:41.017587 env[1141]: time="2023-10-02T18:58:41.017540551Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 18:58:41.017864 kubelet[1438]: E1002 18:58:41.017821 1438 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 18:58:41.017908 kubelet[1438]: E1002 18:58:41.017876 1438 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 18:58:41.018133 kubelet[1438]: E1002 18:58:41.018099 1438 kuberuntime_manager.go:1212] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-s4gmv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod calico-apiserver-78b859fb77-clq22_calico-apiserver(359e9679-9a33-4ff8-ba9d-7f0c9eb25dc6): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 18:58:41.018239 kubelet[1438]: E1002 18:58:41.018157 1438 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-78b859fb77-clq22" podUID=359e9679-9a33-4ff8-ba9d-7f0c9eb25dc6 Oct 2 18:58:41.018480 env[1141]: time="2023-10-02T18:58:41.018442074Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 18:58:41.159760 env[1141]: time="2023-10-02T18:58:41.159633096Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 18:58:41.160532 env[1141]: time="2023-10-02T18:58:41.160496979Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 18:58:41.161128 kubelet[1438]: E1002 18:58:41.160751 1438 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 18:58:41.161128 kubelet[1438]: E1002 18:58:41.160790 1438 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 18:58:41.161128 kubelet[1438]: E1002 18:58:41.160887 1438 kuberuntime_manager.go:1212] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-q474k,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod calico-apiserver-78b859fb77-78756_calico-apiserver(d94ade93-0deb-45b6-b474-f36bdb618021): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 18:58:41.161128 kubelet[1438]: E1002 18:58:41.160923 1438 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-78b859fb77-78756" podUID=d94ade93-0deb-45b6-b474-f36bdb618021 Oct 2 18:58:41.221262 systemd-networkd[1046]: calic546a161e44: Gained IPv6LL Oct 2 18:58:41.336482 kubelet[1438]: E1002 18:58:41.336438 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:41.601339 kubelet[1438]: E1002 18:58:41.601243 1438 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-78b859fb77-78756" podUID=d94ade93-0deb-45b6-b474-f36bdb618021 Oct 2 18:58:41.601672 kubelet[1438]: E1002 18:58:41.601654 1438 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-78b859fb77-clq22" podUID=359e9679-9a33-4ff8-ba9d-7f0c9eb25dc6 Oct 2 18:58:41.609258 kubelet[1438]: I1002 18:58:41.609226 1438 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="default/nginx-deployment-845c78c8b9-bnshg" podStartSLOduration=16.573814978 podCreationTimestamp="2023-10-02 18:58:22 +0000 UTC" firstStartedPulling="2023-10-02 18:58:37.829367634 +0000 UTC m=+29.474896302" lastFinishedPulling="2023-10-02 18:58:40.864743822 +0000 UTC m=+32.510272530" observedRunningTime="2023-10-02 18:58:41.608914205 +0000 UTC m=+33.254442913" watchObservedRunningTime="2023-10-02 18:58:41.609191206 +0000 UTC m=+33.254719874" Oct 2 18:58:41.630000 audit[2957]: NETFILTER_CFG table=filter:77 family=2 entries=10 op=nft_register_rule pid=2957 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:58:41.630000 audit[2957]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffe8070ed0 a2=0 a3=ffff87ec36c0 items=0 ppid=1634 pid=2957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:41.630000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:58:41.630000 audit[2957]: NETFILTER_CFG table=nat:78 family=2 entries=20 op=nft_register_rule pid=2957 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:58:41.630000 audit[2957]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=ffffe8070ed0 a2=0 a3=ffff87ec36c0 items=0 ppid=1634 pid=2957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:41.630000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:58:41.652000 audit[2959]: NETFILTER_CFG table=filter:79 family=2 entries=10 op=nft_register_rule pid=2959 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:58:41.652000 audit[2959]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffd42fff00 a2=0 a3=ffffac54c6c0 items=0 ppid=1634 pid=2959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:41.652000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:58:41.654000 audit[2959]: NETFILTER_CFG table=nat:80 family=2 entries=20 op=nft_register_rule pid=2959 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:58:41.654000 audit[2959]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=ffffd42fff00 a2=0 a3=ffffac54c6c0 items=0 ppid=1634 pid=2959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:58:41.654000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:58:42.336997 kubelet[1438]: E1002 18:58:42.336953 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:43.338004 kubelet[1438]: E1002 18:58:43.337952 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests" Oct 2 18:58:44.338535 kubelet[1438]: E1002 18:58:44.338495 1438 file_linux.go:61] "Unable to read config path" err="path does not exist, ignoring" path="/etc/kubernetes/manifests"