Oct 2 19:29:24.749953 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Oct 2 19:29:24.749974 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 19:29:24.749982 kernel: efi: EFI v2.70 by EDK II Oct 2 19:29:24.749988 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Oct 2 19:29:24.749993 kernel: random: crng init done Oct 2 19:29:24.749998 kernel: ACPI: Early table checksum verification disabled Oct 2 19:29:24.750005 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Oct 2 19:29:24.750012 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Oct 2 19:29:24.750018 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:29:24.750023 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:29:24.750028 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:29:24.750034 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:29:24.750039 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:29:24.750045 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:29:24.750053 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:29:24.750059 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:29:24.750064 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:29:24.750070 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Oct 2 19:29:24.750076 kernel: NUMA: Failed to initialise from firmware Oct 2 19:29:24.750082 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 19:29:24.750088 kernel: NUMA: NODE_DATA [mem 0xdcb0b900-0xdcb10fff] Oct 2 19:29:24.750124 kernel: Zone ranges: Oct 2 19:29:24.750131 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 19:29:24.750139 kernel: DMA32 empty Oct 2 19:29:24.750145 kernel: Normal empty Oct 2 19:29:24.750150 kernel: Movable zone start for each node Oct 2 19:29:24.750156 kernel: Early memory node ranges Oct 2 19:29:24.750162 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Oct 2 19:29:24.750168 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Oct 2 19:29:24.750174 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Oct 2 19:29:24.750180 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Oct 2 19:29:24.750185 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Oct 2 19:29:24.750191 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Oct 2 19:29:24.750197 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Oct 2 19:29:24.750203 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 19:29:24.750211 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Oct 2 19:29:24.750217 kernel: psci: probing for conduit method from ACPI. Oct 2 19:29:24.750223 kernel: psci: PSCIv1.1 detected in firmware. Oct 2 19:29:24.750228 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 19:29:24.750243 kernel: psci: Trusted OS migration not required Oct 2 19:29:24.750253 kernel: psci: SMC Calling Convention v1.1 Oct 2 19:29:24.750259 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Oct 2 19:29:24.750267 kernel: ACPI: SRAT not present Oct 2 19:29:24.750273 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 19:29:24.750279 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 19:29:24.750285 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Oct 2 19:29:24.750291 kernel: Detected PIPT I-cache on CPU0 Oct 2 19:29:24.750297 kernel: CPU features: detected: GIC system register CPU interface Oct 2 19:29:24.750303 kernel: CPU features: detected: Hardware dirty bit management Oct 2 19:29:24.750309 kernel: CPU features: detected: Spectre-v4 Oct 2 19:29:24.750315 kernel: CPU features: detected: Spectre-BHB Oct 2 19:29:24.750322 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 19:29:24.750328 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 19:29:24.750334 kernel: CPU features: detected: ARM erratum 1418040 Oct 2 19:29:24.750340 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Oct 2 19:29:24.750347 kernel: Policy zone: DMA Oct 2 19:29:24.750354 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:29:24.750360 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:29:24.750367 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:29:24.750373 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:29:24.750379 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:29:24.750386 kernel: Memory: 2459280K/2572288K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 113008K reserved, 0K cma-reserved) Oct 2 19:29:24.750393 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 2 19:29:24.750399 kernel: trace event string verifier disabled Oct 2 19:29:24.750405 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 19:29:24.750412 kernel: rcu: RCU event tracing is enabled. Oct 2 19:29:24.750418 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 2 19:29:24.750424 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 19:29:24.750431 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:29:24.750437 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:29:24.750443 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 2 19:29:24.750449 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 19:29:24.750455 kernel: GICv3: 256 SPIs implemented Oct 2 19:29:24.750462 kernel: GICv3: 0 Extended SPIs implemented Oct 2 19:29:24.750468 kernel: GICv3: Distributor has no Range Selector support Oct 2 19:29:24.750474 kernel: Root IRQ handler: gic_handle_irq Oct 2 19:29:24.750480 kernel: GICv3: 16 PPIs implemented Oct 2 19:29:24.750486 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Oct 2 19:29:24.750492 kernel: ACPI: SRAT not present Oct 2 19:29:24.750499 kernel: ITS [mem 0x08080000-0x0809ffff] Oct 2 19:29:24.750505 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Oct 2 19:29:24.750512 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Oct 2 19:29:24.750518 kernel: GICv3: using LPI property table @0x00000000400d0000 Oct 2 19:29:24.750525 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Oct 2 19:29:24.750531 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:29:24.750538 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Oct 2 19:29:24.750545 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Oct 2 19:29:24.750551 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Oct 2 19:29:24.750557 kernel: arm-pv: using stolen time PV Oct 2 19:29:24.750563 kernel: Console: colour dummy device 80x25 Oct 2 19:29:24.750569 kernel: ACPI: Core revision 20210730 Oct 2 19:29:24.750588 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Oct 2 19:29:24.750595 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:29:24.750601 kernel: LSM: Security Framework initializing Oct 2 19:29:24.750607 kernel: SELinux: Initializing. Oct 2 19:29:24.750615 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:29:24.750622 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:29:24.750629 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:29:24.750635 kernel: Platform MSI: ITS@0x8080000 domain created Oct 2 19:29:24.750642 kernel: PCI/MSI: ITS@0x8080000 domain created Oct 2 19:29:24.750648 kernel: Remapping and enabling EFI services. Oct 2 19:29:24.750654 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:29:24.750660 kernel: Detected PIPT I-cache on CPU1 Oct 2 19:29:24.750667 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Oct 2 19:29:24.750675 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Oct 2 19:29:24.750681 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:29:24.750687 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Oct 2 19:29:24.750694 kernel: Detected PIPT I-cache on CPU2 Oct 2 19:29:24.750700 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Oct 2 19:29:24.750707 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Oct 2 19:29:24.750714 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:29:24.750721 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Oct 2 19:29:24.750727 kernel: Detected PIPT I-cache on CPU3 Oct 2 19:29:24.750733 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Oct 2 19:29:24.750741 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Oct 2 19:29:24.750747 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:29:24.750753 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Oct 2 19:29:24.750760 kernel: smp: Brought up 1 node, 4 CPUs Oct 2 19:29:24.750770 kernel: SMP: Total of 4 processors activated. Oct 2 19:29:24.750778 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 19:29:24.750786 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 2 19:29:24.750792 kernel: CPU features: detected: Common not Private translations Oct 2 19:29:24.750799 kernel: CPU features: detected: CRC32 instructions Oct 2 19:29:24.750805 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 2 19:29:24.750812 kernel: CPU features: detected: LSE atomic instructions Oct 2 19:29:24.750819 kernel: CPU features: detected: Privileged Access Never Oct 2 19:29:24.750826 kernel: CPU features: detected: RAS Extension Support Oct 2 19:29:24.750833 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Oct 2 19:29:24.750840 kernel: CPU: All CPU(s) started at EL1 Oct 2 19:29:24.750846 kernel: alternatives: patching kernel code Oct 2 19:29:24.750855 kernel: devtmpfs: initialized Oct 2 19:29:24.750861 kernel: KASLR enabled Oct 2 19:29:24.750868 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:29:24.750874 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 2 19:29:24.750881 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:29:24.750887 kernel: SMBIOS 3.0.0 present. Oct 2 19:29:24.750894 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Oct 2 19:29:24.750900 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:29:24.750907 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 19:29:24.750914 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 19:29:24.750922 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 19:29:24.750928 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:29:24.750935 kernel: audit: type=2000 audit(0.034:1): state=initialized audit_enabled=0 res=1 Oct 2 19:29:24.750941 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:29:24.750948 kernel: cpuidle: using governor menu Oct 2 19:29:24.750954 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 19:29:24.750961 kernel: ASID allocator initialised with 32768 entries Oct 2 19:29:24.750967 kernel: ACPI: bus type PCI registered Oct 2 19:29:24.750974 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:29:24.750982 kernel: Serial: AMBA PL011 UART driver Oct 2 19:29:24.750989 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:29:24.750995 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 19:29:24.751002 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:29:24.751009 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 19:29:24.751015 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:29:24.751022 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 19:29:24.751028 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:29:24.751035 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:29:24.751043 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:29:24.751050 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:29:24.751057 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:29:24.751063 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:29:24.751071 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:29:24.751077 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:29:24.751084 kernel: ACPI: Interpreter enabled Oct 2 19:29:24.751091 kernel: ACPI: Using GIC for interrupt routing Oct 2 19:29:24.751097 kernel: ACPI: MCFG table detected, 1 entries Oct 2 19:29:24.751105 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Oct 2 19:29:24.751112 kernel: printk: console [ttyAMA0] enabled Oct 2 19:29:24.751119 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:29:24.751274 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:29:24.751342 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 2 19:29:24.751403 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 2 19:29:24.751462 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Oct 2 19:29:24.751525 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Oct 2 19:29:24.751534 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Oct 2 19:29:24.751541 kernel: PCI host bridge to bus 0000:00 Oct 2 19:29:24.751627 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Oct 2 19:29:24.751683 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 2 19:29:24.751737 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Oct 2 19:29:24.751791 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:29:24.751865 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Oct 2 19:29:24.751934 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 19:29:24.751995 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Oct 2 19:29:24.752055 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Oct 2 19:29:24.752118 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Oct 2 19:29:24.752180 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Oct 2 19:29:24.752249 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Oct 2 19:29:24.752316 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Oct 2 19:29:24.752370 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Oct 2 19:29:24.752425 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 2 19:29:24.752510 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Oct 2 19:29:24.752523 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 2 19:29:24.752535 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 2 19:29:24.752542 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 2 19:29:24.752550 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 2 19:29:24.752557 kernel: iommu: Default domain type: Translated Oct 2 19:29:24.752564 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 19:29:24.752571 kernel: vgaarb: loaded Oct 2 19:29:24.752586 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:29:24.752593 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:29:24.752600 kernel: PTP clock support registered Oct 2 19:29:24.752606 kernel: Registered efivars operations Oct 2 19:29:24.752613 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 19:29:24.752620 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:29:24.752628 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:29:24.752635 kernel: pnp: PnP ACPI init Oct 2 19:29:24.752702 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Oct 2 19:29:24.752712 kernel: pnp: PnP ACPI: found 1 devices Oct 2 19:29:24.752718 kernel: NET: Registered PF_INET protocol family Oct 2 19:29:24.752725 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:29:24.752732 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:29:24.752739 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:29:24.752748 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:29:24.752755 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:29:24.752761 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:29:24.752768 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:29:24.752775 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:29:24.752782 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:29:24.752788 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:29:24.752795 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Oct 2 19:29:24.752803 kernel: kvm [1]: HYP mode not available Oct 2 19:29:24.752810 kernel: Initialise system trusted keyrings Oct 2 19:29:24.752818 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:29:24.753304 kernel: Key type asymmetric registered Oct 2 19:29:24.753320 kernel: Asymmetric key parser 'x509' registered Oct 2 19:29:24.753328 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:29:24.753335 kernel: io scheduler mq-deadline registered Oct 2 19:29:24.753342 kernel: io scheduler kyber registered Oct 2 19:29:24.753348 kernel: io scheduler bfq registered Oct 2 19:29:24.753355 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 2 19:29:24.753366 kernel: ACPI: button: Power Button [PWRB] Oct 2 19:29:24.753373 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 2 19:29:24.753464 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Oct 2 19:29:24.753474 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:29:24.753481 kernel: thunder_xcv, ver 1.0 Oct 2 19:29:24.753487 kernel: thunder_bgx, ver 1.0 Oct 2 19:29:24.753494 kernel: nicpf, ver 1.0 Oct 2 19:29:24.753501 kernel: nicvf, ver 1.0 Oct 2 19:29:24.753592 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 19:29:24.753662 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T19:29:24 UTC (1696274964) Oct 2 19:29:24.753672 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:29:24.753679 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:29:24.753685 kernel: Segment Routing with IPv6 Oct 2 19:29:24.753692 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:29:24.753699 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:29:24.753705 kernel: Key type dns_resolver registered Oct 2 19:29:24.753712 kernel: registered taskstats version 1 Oct 2 19:29:24.753720 kernel: Loading compiled-in X.509 certificates Oct 2 19:29:24.753727 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 19:29:24.753734 kernel: Key type .fscrypt registered Oct 2 19:29:24.753740 kernel: Key type fscrypt-provisioning registered Oct 2 19:29:24.753747 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:29:24.753754 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:29:24.753761 kernel: ima: No architecture policies found Oct 2 19:29:24.753767 kernel: Freeing unused kernel memory: 34560K Oct 2 19:29:24.753774 kernel: Run /init as init process Oct 2 19:29:24.753782 kernel: with arguments: Oct 2 19:29:24.753789 kernel: /init Oct 2 19:29:24.753795 kernel: with environment: Oct 2 19:29:24.753802 kernel: HOME=/ Oct 2 19:29:24.753808 kernel: TERM=linux Oct 2 19:29:24.753815 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:29:24.753823 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:29:24.753834 systemd[1]: Detected virtualization kvm. Oct 2 19:29:24.753841 systemd[1]: Detected architecture arm64. Oct 2 19:29:24.753848 systemd[1]: Running in initrd. Oct 2 19:29:24.753855 systemd[1]: No hostname configured, using default hostname. Oct 2 19:29:24.753862 systemd[1]: Hostname set to . Oct 2 19:29:24.753869 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:29:24.753876 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:29:24.753883 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:29:24.753892 systemd[1]: Reached target cryptsetup.target. Oct 2 19:29:24.753899 systemd[1]: Reached target paths.target. Oct 2 19:29:24.753905 systemd[1]: Reached target slices.target. Oct 2 19:29:24.753912 systemd[1]: Reached target swap.target. Oct 2 19:29:24.753919 systemd[1]: Reached target timers.target. Oct 2 19:29:24.753927 systemd[1]: Listening on iscsid.socket. Oct 2 19:29:24.753934 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:29:24.753941 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:29:24.753950 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:29:24.753958 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:29:24.753965 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:29:24.753972 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:29:24.753979 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:29:24.753986 systemd[1]: Reached target sockets.target. Oct 2 19:29:24.753994 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:29:24.754001 systemd[1]: Finished network-cleanup.service. Oct 2 19:29:24.754009 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:29:24.754018 systemd[1]: Starting systemd-journald.service... Oct 2 19:29:24.754025 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:29:24.754032 systemd[1]: Starting systemd-resolved.service... Oct 2 19:29:24.754039 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:29:24.754046 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:29:24.754053 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:29:24.754061 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:29:24.754068 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:29:24.754075 kernel: audit: type=1130 audit(1696274964.751:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:24.754083 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:29:24.754094 systemd-journald[289]: Journal started Oct 2 19:29:24.754134 systemd-journald[289]: Runtime Journal (/run/log/journal/f56bd741436b438f9ab7a86b482e1be5) is 6.0M, max 48.7M, 42.6M free. Oct 2 19:29:24.751000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:24.745434 systemd-modules-load[290]: Inserted module 'overlay' Oct 2 19:29:24.764496 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:29:24.764517 kernel: Bridge firewalling registered Oct 2 19:29:24.759896 systemd-modules-load[290]: Inserted module 'br_netfilter' Oct 2 19:29:24.767606 systemd[1]: Started systemd-journald.service. Oct 2 19:29:24.766000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:24.767756 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:29:24.776944 kernel: audit: type=1130 audit(1696274964.766:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:24.776967 kernel: SCSI subsystem initialized Oct 2 19:29:24.776977 kernel: audit: type=1130 audit(1696274964.770:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:24.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:24.774452 systemd-resolved[291]: Positive Trust Anchors: Oct 2 19:29:24.774461 systemd-resolved[291]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:29:24.774488 systemd-resolved[291]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:29:24.791603 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:29:24.791985 kernel: audit: type=1130 audit(1696274964.779:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:24.792006 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:29:24.792016 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:29:24.779000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:24.779704 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:29:24.780343 systemd-resolved[291]: Defaulting to hostname 'linux'. Oct 2 19:29:24.794000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:24.787508 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:29:24.800000 kernel: audit: type=1130 audit(1696274964.794:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:24.792448 systemd[1]: Started systemd-resolved.service. Oct 2 19:29:24.804912 kernel: audit: type=1130 audit(1696274964.800:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:24.800000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:24.794629 systemd-modules-load[290]: Inserted module 'dm_multipath' Oct 2 19:29:24.806396 dracut-cmdline[309]: dracut-dracut-053 Oct 2 19:29:24.794981 systemd[1]: Reached target nss-lookup.target. Oct 2 19:29:24.799496 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:29:24.802090 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:29:24.811659 dracut-cmdline[309]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:29:24.811771 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:29:24.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:24.820644 kernel: audit: type=1130 audit(1696274964.816:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:24.884597 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:29:24.892598 kernel: iscsi: registered transport (tcp) Oct 2 19:29:24.906956 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:29:24.907040 kernel: QLogic iSCSI HBA Driver Oct 2 19:29:24.955283 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:29:24.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:24.957047 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:29:24.960558 kernel: audit: type=1130 audit(1696274964.956:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:25.003605 kernel: raid6: neonx8 gen() 13737 MB/s Oct 2 19:29:25.020609 kernel: raid6: neonx8 xor() 10804 MB/s Oct 2 19:29:25.037606 kernel: raid6: neonx4 gen() 13526 MB/s Oct 2 19:29:25.054602 kernel: raid6: neonx4 xor() 11140 MB/s Oct 2 19:29:25.071602 kernel: raid6: neonx2 gen() 12977 MB/s Oct 2 19:29:25.088601 kernel: raid6: neonx2 xor() 10249 MB/s Oct 2 19:29:25.105602 kernel: raid6: neonx1 gen() 10478 MB/s Oct 2 19:29:25.122615 kernel: raid6: neonx1 xor() 8769 MB/s Oct 2 19:29:25.139602 kernel: raid6: int64x8 gen() 6287 MB/s Oct 2 19:29:25.156606 kernel: raid6: int64x8 xor() 3542 MB/s Oct 2 19:29:25.173607 kernel: raid6: int64x4 gen() 7243 MB/s Oct 2 19:29:25.190600 kernel: raid6: int64x4 xor() 3848 MB/s Oct 2 19:29:25.207603 kernel: raid6: int64x2 gen() 6143 MB/s Oct 2 19:29:25.224609 kernel: raid6: int64x2 xor() 3314 MB/s Oct 2 19:29:25.241604 kernel: raid6: int64x1 gen() 5037 MB/s Oct 2 19:29:25.258832 kernel: raid6: int64x1 xor() 2640 MB/s Oct 2 19:29:25.258852 kernel: raid6: using algorithm neonx8 gen() 13737 MB/s Oct 2 19:29:25.258861 kernel: raid6: .... xor() 10804 MB/s, rmw enabled Oct 2 19:29:25.260046 kernel: raid6: using neon recovery algorithm Oct 2 19:29:25.273599 kernel: xor: measuring software checksum speed Oct 2 19:29:25.275744 kernel: 8regs : 17293 MB/sec Oct 2 19:29:25.275758 kernel: 32regs : 20755 MB/sec Oct 2 19:29:25.276654 kernel: arm64_neon : 27845 MB/sec Oct 2 19:29:25.276665 kernel: xor: using function: arm64_neon (27845 MB/sec) Oct 2 19:29:25.342617 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 19:29:25.360914 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:29:25.361000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:25.364000 audit: BPF prog-id=7 op=LOAD Oct 2 19:29:25.364000 audit: BPF prog-id=8 op=LOAD Oct 2 19:29:25.365433 systemd[1]: Starting systemd-udevd.service... Oct 2 19:29:25.366923 kernel: audit: type=1130 audit(1696274965.361:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:25.382831 systemd-udevd[490]: Using default interface naming scheme 'v252'. Oct 2 19:29:25.386381 systemd[1]: Started systemd-udevd.service. Oct 2 19:29:25.387000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:25.388797 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:29:25.402626 dracut-pre-trigger[497]: rd.md=0: removing MD RAID activation Oct 2 19:29:25.439969 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:29:25.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:25.441719 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:29:25.479872 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:29:25.480000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:25.513336 kernel: virtio_blk virtio1: [vda] 9289728 512-byte logical blocks (4.76 GB/4.43 GiB) Oct 2 19:29:25.527601 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:29:25.540234 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:29:25.543686 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (550) Oct 2 19:29:25.544219 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:29:25.550845 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:29:25.551879 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:29:25.559491 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:29:25.561172 systemd[1]: Starting disk-uuid.service... Oct 2 19:29:25.575731 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:29:25.584617 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:29:26.622608 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:29:26.623075 disk-uuid[565]: The operation has completed successfully. Oct 2 19:29:26.702122 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:29:26.702218 systemd[1]: Finished disk-uuid.service. Oct 2 19:29:26.702000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:26.702000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:26.703846 systemd[1]: Starting verity-setup.service... Oct 2 19:29:26.738609 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 19:29:26.760427 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:29:26.762883 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:29:26.765747 systemd[1]: Finished verity-setup.service. Oct 2 19:29:26.765000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:26.815397 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:29:26.816811 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:29:26.816318 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:29:26.817078 systemd[1]: Starting ignition-setup.service... Oct 2 19:29:26.819547 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:29:26.829150 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:29:26.829191 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:29:26.829207 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:29:26.843191 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:29:26.855868 systemd[1]: Finished ignition-setup.service. Oct 2 19:29:26.856000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:26.857695 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:29:26.939292 ignition[660]: Ignition 2.14.0 Oct 2 19:29:26.939302 ignition[660]: Stage: fetch-offline Oct 2 19:29:26.939343 ignition[660]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:29:26.939352 ignition[660]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:29:26.939483 ignition[660]: parsed url from cmdline: "" Oct 2 19:29:26.939486 ignition[660]: no config URL provided Oct 2 19:29:26.939491 ignition[660]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:29:26.939498 ignition[660]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:29:26.939515 ignition[660]: op(1): [started] loading QEMU firmware config module Oct 2 19:29:26.939519 ignition[660]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 2 19:29:26.949507 ignition[660]: op(1): [finished] loading QEMU firmware config module Oct 2 19:29:26.953181 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:29:26.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:26.954000 audit: BPF prog-id=9 op=LOAD Oct 2 19:29:26.955310 systemd[1]: Starting systemd-networkd.service... Oct 2 19:29:26.976372 systemd-networkd[742]: lo: Link UP Oct 2 19:29:26.976384 systemd-networkd[742]: lo: Gained carrier Oct 2 19:29:26.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:26.976768 systemd-networkd[742]: Enumeration completed Oct 2 19:29:26.976946 systemd-networkd[742]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:29:26.977061 systemd[1]: Started systemd-networkd.service. Oct 2 19:29:26.978254 systemd[1]: Reached target network.target. Oct 2 19:29:26.978405 systemd-networkd[742]: eth0: Link UP Oct 2 19:29:26.978409 systemd-networkd[742]: eth0: Gained carrier Oct 2 19:29:26.980265 systemd[1]: Starting iscsiuio.service... Oct 2 19:29:26.990010 systemd[1]: Started iscsiuio.service. Oct 2 19:29:26.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:26.991777 systemd[1]: Starting iscsid.service... Oct 2 19:29:26.996038 iscsid[747]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:29:26.996038 iscsid[747]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:29:26.996038 iscsid[747]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:29:26.996038 iscsid[747]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:29:26.996038 iscsid[747]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:29:26.996038 iscsid[747]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:29:27.003000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:26.999776 systemd[1]: Started iscsid.service. Oct 2 19:29:27.002338 ignition[660]: parsing config with SHA512: 734ea4d96bd728993e0af3e2ab2ec04a3186fb2fb09d07f5fdcefddb555cc665e7383b426a0dbabc8ec4ae60d2e3db102d4d8bca97caa4a55aedf9a57555447b Oct 2 19:29:27.003084 systemd-networkd[742]: eth0: DHCPv4 address 10.0.0.8/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:29:27.004840 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:29:27.020805 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:29:27.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:27.021840 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:29:27.023467 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:29:27.024988 systemd[1]: Reached target remote-fs.target. Oct 2 19:29:27.027195 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:29:27.036535 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:29:27.036000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:27.048475 unknown[660]: fetched base config from "system" Oct 2 19:29:27.049400 unknown[660]: fetched user config from "qemu" Oct 2 19:29:27.050844 ignition[660]: fetch-offline: fetch-offline passed Oct 2 19:29:27.052131 ignition[660]: Ignition finished successfully Oct 2 19:29:27.054000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:27.053920 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:29:27.054985 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 2 19:29:27.055780 systemd[1]: Starting ignition-kargs.service... Oct 2 19:29:27.066567 ignition[764]: Ignition 2.14.0 Oct 2 19:29:27.066610 ignition[764]: Stage: kargs Oct 2 19:29:27.066718 ignition[764]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:29:27.066727 ignition[764]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:29:27.067686 ignition[764]: kargs: kargs passed Oct 2 19:29:27.067735 ignition[764]: Ignition finished successfully Oct 2 19:29:27.074843 systemd[1]: Finished ignition-kargs.service. Oct 2 19:29:27.075959 systemd-resolved[291]: Detected conflict on linux IN A 10.0.0.8 Oct 2 19:29:27.076000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:27.075969 systemd-resolved[291]: Hostname conflict, changing published hostname from 'linux' to 'linux11'. Oct 2 19:29:27.077672 systemd[1]: Starting ignition-disks.service... Oct 2 19:29:27.086492 ignition[769]: Ignition 2.14.0 Oct 2 19:29:27.086503 ignition[769]: Stage: disks Oct 2 19:29:27.086623 ignition[769]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:29:27.086633 ignition[769]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:29:27.087815 ignition[769]: disks: disks passed Oct 2 19:29:27.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:27.089529 systemd[1]: Finished ignition-disks.service. Oct 2 19:29:27.087869 ignition[769]: Ignition finished successfully Oct 2 19:29:27.091309 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:29:27.092498 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:29:27.093827 systemd[1]: Reached target local-fs.target. Oct 2 19:29:27.095114 systemd[1]: Reached target sysinit.target. Oct 2 19:29:27.096463 systemd[1]: Reached target basic.target. Oct 2 19:29:27.098629 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:29:27.111166 systemd-fsck[777]: ROOT: clean, 603/553520 files, 56011/553472 blocks Oct 2 19:29:27.124929 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:29:27.125000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:27.126624 systemd[1]: Mounting sysroot.mount... Oct 2 19:29:27.134596 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:29:27.134627 systemd[1]: Mounted sysroot.mount. Oct 2 19:29:27.135362 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:29:27.138109 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:29:27.138995 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:29:27.139033 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:29:27.139058 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:29:27.141457 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:29:27.144352 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:29:27.149935 initrd-setup-root[787]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:29:27.155567 initrd-setup-root[795]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:29:27.159558 initrd-setup-root[803]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:29:27.164389 initrd-setup-root[811]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:29:27.197310 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:29:27.197000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:27.199093 systemd[1]: Starting ignition-mount.service... Oct 2 19:29:27.200412 systemd[1]: Starting sysroot-boot.service... Oct 2 19:29:27.206379 bash[828]: umount: /sysroot/usr/share/oem: not mounted. Oct 2 19:29:27.216932 ignition[829]: INFO : Ignition 2.14.0 Oct 2 19:29:27.216932 ignition[829]: INFO : Stage: mount Oct 2 19:29:27.219121 ignition[829]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:29:27.219121 ignition[829]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:29:27.219121 ignition[829]: INFO : mount: mount passed Oct 2 19:29:27.219121 ignition[829]: INFO : Ignition finished successfully Oct 2 19:29:27.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:27.220756 systemd[1]: Finished ignition-mount.service. Oct 2 19:29:27.228088 systemd[1]: Finished sysroot-boot.service. Oct 2 19:29:27.228000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:27.774007 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:29:27.792608 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (838) Oct 2 19:29:27.794848 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:29:27.794889 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:29:27.794899 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:29:27.799637 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:29:27.801239 systemd[1]: Starting ignition-files.service... Oct 2 19:29:27.818495 ignition[858]: INFO : Ignition 2.14.0 Oct 2 19:29:27.819465 ignition[858]: INFO : Stage: files Oct 2 19:29:27.820294 ignition[858]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:29:27.821306 ignition[858]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:29:27.823431 ignition[858]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:29:27.829259 ignition[858]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:29:27.830562 ignition[858]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:29:27.833894 ignition[858]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:29:27.835408 ignition[858]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:29:27.837135 unknown[858]: wrote ssh authorized keys file for user: core Oct 2 19:29:27.838510 ignition[858]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:29:27.838510 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 19:29:27.838510 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Oct 2 19:29:28.075618 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:29:28.317411 ignition[858]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Oct 2 19:29:28.320457 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 19:29:28.320457 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 19:29:28.320457 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Oct 2 19:29:28.458361 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:29:28.582083 ignition[858]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Oct 2 19:29:28.585192 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 19:29:28.585192 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:29:28.585192 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubeadm: attempt #1 Oct 2 19:29:28.933706 systemd-networkd[742]: eth0: Gained IPv6LL Oct 2 19:29:29.144507 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:29:29.521689 ignition[858]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 45b3100984c979ba0f1c0df8f4211474c2d75ebe916e677dff5fc8e3b3697cf7a953da94e356f39684cc860dff6878b772b7514c55651c2f866d9efeef23f970 Oct 2 19:29:29.524670 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:29:29.524670 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:29:29.524670 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubelet: attempt #1 Oct 2 19:29:29.558285 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:29:30.182442 ignition[858]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 71857ff499ae135fa478e1827a0ed8865e578a8d2b1e25876e914fd0beba03733801c0654bcd4c0567bafeb16887dafb2dbbe8d1116e6ea28dcd8366c142d348 Oct 2 19:29:30.185391 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:29:30.185391 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:29:30.185391 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubectl: attempt #1 Oct 2 19:29:30.222842 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:29:30.586040 ignition[858]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 14be61ec35669a27acf2df0380afb85b9b42311d50ca1165718421c5f605df1119ec9ae314696a674051712e80deeaa65e62d2d62ed4d107fe99d0aaf419dafc Oct 2 19:29:30.586040 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:29:30.590438 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:29:30.590438 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:29:30.590438 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:29:30.590438 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 19:29:30.753572 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 19:29:30.808762 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:29:30.810608 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:29:30.810608 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:29:30.810608 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:29:30.810608 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:29:30.810608 ignition[858]: INFO : files: op(c): [started] processing unit "coreos-metadata.service" Oct 2 19:29:30.819713 ignition[858]: INFO : files: op(c): op(d): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:29:30.819713 ignition[858]: INFO : files: op(c): op(d): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:29:30.819713 ignition[858]: INFO : files: op(c): [finished] processing unit "coreos-metadata.service" Oct 2 19:29:30.819713 ignition[858]: INFO : files: op(e): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:29:30.819713 ignition[858]: INFO : files: op(e): op(f): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:29:30.819713 ignition[858]: INFO : files: op(e): op(f): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:29:30.819713 ignition[858]: INFO : files: op(e): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:29:30.819713 ignition[858]: INFO : files: op(10): [started] processing unit "prepare-critools.service" Oct 2 19:29:30.819713 ignition[858]: INFO : files: op(10): op(11): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:29:30.819713 ignition[858]: INFO : files: op(10): op(11): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:29:30.819713 ignition[858]: INFO : files: op(10): [finished] processing unit "prepare-critools.service" Oct 2 19:29:30.819713 ignition[858]: INFO : files: op(12): [started] setting preset to disabled for "coreos-metadata.service" Oct 2 19:29:30.819713 ignition[858]: INFO : files: op(12): op(13): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:29:30.881963 ignition[858]: INFO : files: op(12): op(13): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:29:30.884529 ignition[858]: INFO : files: op(12): [finished] setting preset to disabled for "coreos-metadata.service" Oct 2 19:29:30.884529 ignition[858]: INFO : files: op(14): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:29:30.884529 ignition[858]: INFO : files: op(14): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:29:30.884529 ignition[858]: INFO : files: op(15): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:29:30.884529 ignition[858]: INFO : files: op(15): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:29:30.884529 ignition[858]: INFO : files: createResultFile: createFiles: op(16): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:29:30.884529 ignition[858]: INFO : files: createResultFile: createFiles: op(16): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:29:30.884529 ignition[858]: INFO : files: files passed Oct 2 19:29:30.884529 ignition[858]: INFO : Ignition finished successfully Oct 2 19:29:30.912047 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:29:30.912070 kernel: audit: type=1130 audit(1696274970.886:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:30.912088 kernel: audit: type=1130 audit(1696274970.899:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:30.912098 kernel: audit: type=1131 audit(1696274970.899:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:30.912107 kernel: audit: type=1130 audit(1696274970.906:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:30.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:30.899000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:30.899000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:30.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:30.884570 systemd[1]: Finished ignition-files.service. Oct 2 19:29:30.887860 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:29:30.892296 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:29:30.916524 initrd-setup-root-after-ignition[883]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 2 19:29:30.893063 systemd[1]: Starting ignition-quench.service... Oct 2 19:29:30.918829 initrd-setup-root-after-ignition[886]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:29:30.896695 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:29:30.896781 systemd[1]: Finished ignition-quench.service. Oct 2 19:29:30.899970 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:29:30.907184 systemd[1]: Reached target ignition-complete.target. Oct 2 19:29:30.912040 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:29:30.927329 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:29:30.927429 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:29:30.929000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:30.930007 systemd[1]: Reached target initrd-fs.target. Oct 2 19:29:30.935382 kernel: audit: type=1130 audit(1696274970.929:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:30.935405 kernel: audit: type=1131 audit(1696274970.929:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:30.929000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:30.936103 systemd[1]: Reached target initrd.target. Oct 2 19:29:30.937062 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:29:30.938013 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:29:30.949757 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:29:30.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:30.953611 kernel: audit: type=1130 audit(1696274970.949:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:30.951332 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:29:30.960310 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:29:30.961195 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:29:30.962638 systemd[1]: Stopped target timers.target. Oct 2 19:29:30.963981 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:29:30.965000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:30.964083 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:29:30.969814 kernel: audit: type=1131 audit(1696274970.965:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:30.965554 systemd[1]: Stopped target initrd.target. Oct 2 19:29:30.969256 systemd[1]: Stopped target basic.target. Oct 2 19:29:30.970515 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:29:30.971871 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:29:30.973275 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:29:30.974732 systemd[1]: Stopped target remote-fs.target. Oct 2 19:29:30.976065 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:29:30.977474 systemd[1]: Stopped target sysinit.target. Oct 2 19:29:30.978791 systemd[1]: Stopped target local-fs.target. Oct 2 19:29:30.980125 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:29:30.981434 systemd[1]: Stopped target swap.target. Oct 2 19:29:30.983000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:30.982640 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:29:30.988357 kernel: audit: type=1131 audit(1696274970.983:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:30.982757 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:29:30.989000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:30.984102 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:29:30.993665 kernel: audit: type=1131 audit(1696274970.989:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:30.992000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:30.987555 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:29:30.987674 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:29:30.989250 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:29:30.989348 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:29:30.993195 systemd[1]: Stopped target paths.target. Oct 2 19:29:30.994359 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:29:30.999384 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:29:31.000384 systemd[1]: Stopped target slices.target. Oct 2 19:29:31.001763 systemd[1]: Stopped target sockets.target. Oct 2 19:29:31.003140 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:29:31.003000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.003314 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:29:31.006000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.004628 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:29:31.004724 systemd[1]: Stopped ignition-files.service. Oct 2 19:29:31.011182 iscsid[747]: iscsid shutting down. Oct 2 19:29:31.007138 systemd[1]: Stopping ignition-mount.service... Oct 2 19:29:31.012000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.008686 systemd[1]: Stopping iscsid.service... Oct 2 19:29:31.011707 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:29:31.017317 ignition[899]: INFO : Ignition 2.14.0 Oct 2 19:29:31.017317 ignition[899]: INFO : Stage: umount Oct 2 19:29:31.017317 ignition[899]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:29:31.017317 ignition[899]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:29:31.017317 ignition[899]: INFO : umount: umount passed Oct 2 19:29:31.017317 ignition[899]: INFO : Ignition finished successfully Oct 2 19:29:31.017000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.018000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.021000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.023000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.011833 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:29:31.013749 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:29:31.027000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.016426 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:29:31.028000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.016561 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:29:31.030000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.018421 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:29:31.018526 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:29:31.034000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.034000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.020781 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:29:31.034000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.020877 systemd[1]: Stopped iscsid.service. Oct 2 19:29:31.036000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.022057 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:29:31.022141 systemd[1]: Stopped ignition-mount.service. Oct 2 19:29:31.024761 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:29:31.025431 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:29:31.041000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.025505 systemd[1]: Closed iscsid.socket. Oct 2 19:29:31.026287 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:29:31.026340 systemd[1]: Stopped ignition-disks.service. Oct 2 19:29:31.027933 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:29:31.027973 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:29:31.029250 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:29:31.029286 systemd[1]: Stopped ignition-setup.service. Oct 2 19:29:31.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.030913 systemd[1]: Stopping iscsiuio.service... Oct 2 19:29:31.032974 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:29:31.033052 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:29:31.034485 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:29:31.053000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.034565 systemd[1]: Stopped iscsiuio.service. Oct 2 19:29:31.055000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.035759 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:29:31.056000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.035833 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:29:31.037754 systemd[1]: Stopped target network.target. Oct 2 19:29:31.039153 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:29:31.039186 systemd[1]: Closed iscsiuio.socket. Oct 2 19:29:31.064000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.040357 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:29:31.040400 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:29:31.067000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.041953 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:29:31.043319 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:29:31.070000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:29:31.046617 systemd-networkd[742]: eth0: DHCPv6 lease lost Oct 2 19:29:31.070000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:29:31.072000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.047840 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:29:31.072000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.047934 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:29:31.075000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.049634 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:29:31.049663 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:29:31.051394 systemd[1]: Stopping network-cleanup.service... Oct 2 19:29:31.052940 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:29:31.052998 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:29:31.054463 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:29:31.078000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.080000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.054504 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:29:31.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.083000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.056539 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:29:31.056595 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:29:31.057675 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:29:31.062952 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:29:31.063412 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:29:31.063499 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:29:31.066254 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:29:31.066383 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:29:31.068120 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:29:31.068157 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:29:31.069375 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:29:31.069409 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:29:31.070843 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:29:31.070887 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:29:31.072237 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:29:31.072275 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:29:31.073658 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:29:31.073695 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:29:31.075974 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:29:31.077533 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:29:31.077606 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:29:31.079260 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:29:31.079349 systemd[1]: Stopped network-cleanup.service. Oct 2 19:29:31.082371 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:29:31.082450 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:29:31.083851 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:29:31.085812 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:29:31.093023 systemd[1]: Switching root. Oct 2 19:29:31.113053 systemd-journald[289]: Journal stopped Oct 2 19:29:33.382183 systemd-journald[289]: Received SIGTERM from PID 1 (systemd). Oct 2 19:29:33.382291 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:29:33.382310 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:29:33.382321 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:29:33.382331 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:29:33.382343 kernel: SELinux: policy capability open_perms=1 Oct 2 19:29:33.382353 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:29:33.382362 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:29:33.382372 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:29:33.382382 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:29:33.382391 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:29:33.382410 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:29:33.382421 systemd[1]: Successfully loaded SELinux policy in 34.783ms. Oct 2 19:29:33.382450 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 7.329ms. Oct 2 19:29:33.382464 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:29:33.382475 systemd[1]: Detected virtualization kvm. Oct 2 19:29:33.382486 systemd[1]: Detected architecture arm64. Oct 2 19:29:33.382496 systemd[1]: Detected first boot. Oct 2 19:29:33.382506 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:29:33.382517 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:29:33.382530 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:29:33.382542 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:29:33.382555 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:29:33.382567 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:29:33.382594 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:29:33.382606 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:29:33.382617 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:29:33.382627 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:29:33.382639 systemd[1]: Created slice system-getty.slice. Oct 2 19:29:33.382650 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:29:33.382660 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:29:33.382671 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:29:33.382682 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:29:33.382692 systemd[1]: Created slice user.slice. Oct 2 19:29:33.382703 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:29:33.382713 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:29:33.382723 systemd[1]: Set up automount boot.automount. Oct 2 19:29:33.382735 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:29:33.382794 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:29:33.382811 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:29:33.382823 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:29:33.382837 systemd[1]: Reached target integritysetup.target. Oct 2 19:29:33.382848 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:29:33.382859 systemd[1]: Reached target remote-fs.target. Oct 2 19:29:33.382869 systemd[1]: Reached target slices.target. Oct 2 19:29:33.382882 systemd[1]: Reached target swap.target. Oct 2 19:29:33.382893 systemd[1]: Reached target torcx.target. Oct 2 19:29:33.382904 systemd[1]: Reached target veritysetup.target. Oct 2 19:29:33.382914 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:29:33.382924 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:29:33.382935 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:29:33.382946 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:29:33.382956 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:29:33.382967 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:29:33.382988 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:29:33.383000 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:29:33.383011 systemd[1]: Mounting media.mount... Oct 2 19:29:33.383021 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:29:33.383032 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:29:33.383043 systemd[1]: Mounting tmp.mount... Oct 2 19:29:33.383054 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:29:33.383064 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:29:33.383076 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:29:33.383087 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:29:33.383099 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:29:33.383110 systemd[1]: Starting modprobe@drm.service... Oct 2 19:29:33.383121 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:29:33.383132 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:29:33.383143 systemd[1]: Starting modprobe@loop.service... Oct 2 19:29:33.383154 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:29:33.383165 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:29:33.383175 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:29:33.383187 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:29:33.383204 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:29:33.383216 systemd[1]: Stopped systemd-journald.service. Oct 2 19:29:33.383227 systemd[1]: Starting systemd-journald.service... Oct 2 19:29:33.383237 kernel: fuse: init (API version 7.34) Oct 2 19:29:33.383247 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:29:33.383258 kernel: loop: module loaded Oct 2 19:29:33.383269 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:29:33.383280 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:29:33.383291 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:29:33.383304 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:29:33.383316 systemd[1]: Stopped verity-setup.service. Oct 2 19:29:33.383328 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:29:33.383338 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:29:33.383348 systemd[1]: Mounted media.mount. Oct 2 19:29:33.383400 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:29:33.383417 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:29:33.383427 systemd[1]: Mounted tmp.mount. Oct 2 19:29:33.383438 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:29:33.383451 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:29:33.383462 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:29:33.383475 systemd-journald[991]: Journal started Oct 2 19:29:33.383550 systemd-journald[991]: Runtime Journal (/run/log/journal/f56bd741436b438f9ab7a86b482e1be5) is 6.0M, max 48.7M, 42.6M free. Oct 2 19:29:31.174000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:29:31.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:29:31.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:29:31.360000 audit: BPF prog-id=10 op=LOAD Oct 2 19:29:31.360000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:29:31.360000 audit: BPF prog-id=11 op=LOAD Oct 2 19:29:31.361000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:29:33.149000 audit: BPF prog-id=12 op=LOAD Oct 2 19:29:33.149000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:29:33.149000 audit: BPF prog-id=13 op=LOAD Oct 2 19:29:33.149000 audit: BPF prog-id=14 op=LOAD Oct 2 19:29:33.149000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:29:33.149000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:29:33.150000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.154000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.163000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:29:33.282000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.287000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.293000 audit: BPF prog-id=15 op=LOAD Oct 2 19:29:33.293000 audit: BPF prog-id=16 op=LOAD Oct 2 19:29:33.293000 audit: BPF prog-id=17 op=LOAD Oct 2 19:29:33.293000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:29:33.293000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:29:33.362000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.376000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.381000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:29:33.381000 audit[991]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=ffffe254c5e0 a2=4000 a3=1 items=0 ppid=1 pid=991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:33.381000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:29:33.383000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.383000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.148094 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:29:31.423142 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:29:31Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:29:33.148108 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 19:29:31.423700 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:29:31Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:29:33.151136 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:29:31.423719 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:29:31Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:29:31.423751 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:29:31Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:29:31.423761 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:29:31Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:29:31.423790 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:29:31Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:29:31.423802 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:29:31Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:29:31.423995 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:29:31Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:29:31.424026 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:29:31Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:29:31.424037 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:29:31Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:29:31.424479 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:29:31Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:29:31.424517 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:29:31Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:29:31.424534 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:29:31Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:29:33.385587 systemd[1]: Started systemd-journald.service. Oct 2 19:29:31.424550 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:29:31Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:29:31.424566 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:29:31Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:29:33.385000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:31.424591 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:29:31Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:29:32.887467 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:29:32Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:29:32.887770 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:29:32Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:29:32.887877 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:29:32Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:29:32.888036 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:29:32Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:29:32.888085 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:29:32Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:29:32.888141 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:29:32Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:29:33.386329 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:29:33.386560 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:29:33.386000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.386000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.387808 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:29:33.388274 systemd[1]: Finished modprobe@drm.service. Oct 2 19:29:33.388000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.388000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.389403 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:29:33.389552 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:29:33.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.390752 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:29:33.390913 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:29:33.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.391000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.392104 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:29:33.392281 systemd[1]: Finished modprobe@loop.service. Oct 2 19:29:33.392000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.392000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.393620 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:29:33.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.394802 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:29:33.395000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.396000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.396160 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:29:33.397721 systemd[1]: Reached target network-pre.target. Oct 2 19:29:33.400545 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:29:33.403145 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:29:33.404158 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:29:33.406752 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:29:33.409420 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:29:33.410534 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:29:33.412075 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:29:33.413054 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:29:33.414857 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:29:33.421041 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:29:33.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.422205 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:29:33.423301 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:29:33.424507 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:29:33.424000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.425767 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:29:33.428425 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:29:33.429920 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:29:33.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.435510 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:29:33.442606 systemd-journald[991]: Time spent on flushing to /var/log/journal/f56bd741436b438f9ab7a86b482e1be5 is 22.387ms for 999 entries. Oct 2 19:29:33.442606 systemd-journald[991]: System Journal (/var/log/journal/f56bd741436b438f9ab7a86b482e1be5) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:29:33.474105 systemd-journald[991]: Received client request to flush runtime journal. Oct 2 19:29:33.468000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.469000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.468041 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:29:33.474474 udevadm[1033]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 19:29:33.469305 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:29:33.475102 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:29:33.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.828241 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:29:33.830714 systemd[1]: Starting systemd-udevd.service... Oct 2 19:29:33.828000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.829000 audit: BPF prog-id=18 op=LOAD Oct 2 19:29:33.829000 audit: BPF prog-id=19 op=LOAD Oct 2 19:29:33.829000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:29:33.829000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:29:33.850000 systemd-udevd[1036]: Using default interface naming scheme 'v252'. Oct 2 19:29:33.866114 systemd[1]: Started systemd-udevd.service. Oct 2 19:29:33.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.867000 audit: BPF prog-id=20 op=LOAD Oct 2 19:29:33.870655 systemd[1]: Starting systemd-networkd.service... Oct 2 19:29:33.874000 audit: BPF prog-id=21 op=LOAD Oct 2 19:29:33.874000 audit: BPF prog-id=22 op=LOAD Oct 2 19:29:33.874000 audit: BPF prog-id=23 op=LOAD Oct 2 19:29:33.875767 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:29:33.891288 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Oct 2 19:29:33.905081 systemd[1]: Started systemd-userdbd.service. Oct 2 19:29:33.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.964494 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:29:33.987075 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:29:33.987000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.989494 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:29:34.019903 lvm[1070]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:29:34.019999 systemd-networkd[1049]: lo: Link UP Oct 2 19:29:34.020004 systemd-networkd[1049]: lo: Gained carrier Oct 2 19:29:34.020366 systemd-networkd[1049]: Enumeration completed Oct 2 19:29:34.020469 systemd[1]: Started systemd-networkd.service. Oct 2 19:29:34.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:34.021661 systemd-networkd[1049]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:29:34.023133 systemd-networkd[1049]: eth0: Link UP Oct 2 19:29:34.023144 systemd-networkd[1049]: eth0: Gained carrier Oct 2 19:29:34.043645 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:29:34.044000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:34.044810 systemd[1]: Reached target cryptsetup.target. Oct 2 19:29:34.047211 systemd[1]: Starting lvm2-activation.service... Oct 2 19:29:34.052269 lvm[1071]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:29:34.070728 systemd-networkd[1049]: eth0: DHCPv4 address 10.0.0.8/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:29:34.096671 systemd[1]: Finished lvm2-activation.service. Oct 2 19:29:34.097000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:34.097876 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:29:34.098823 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:29:34.098874 systemd[1]: Reached target local-fs.target. Oct 2 19:29:34.099727 systemd[1]: Reached target machines.target. Oct 2 19:29:34.102341 systemd[1]: Starting ldconfig.service... Oct 2 19:29:34.106305 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:29:34.106457 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:29:34.108224 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:29:34.111411 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:29:34.114485 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:29:34.116679 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:29:34.116829 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:29:34.118283 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:29:34.124217 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1073 (bootctl) Oct 2 19:29:34.125697 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:29:34.143833 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:29:34.144000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:34.213043 systemd-tmpfiles[1076]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:29:34.217035 systemd-tmpfiles[1076]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:29:34.220553 systemd-tmpfiles[1076]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:29:34.234594 systemd-fsck[1082]: fsck.fat 4.2 (2021-01-31) Oct 2 19:29:34.234594 systemd-fsck[1082]: /dev/vda1: 236 files, 113463/258078 clusters Oct 2 19:29:34.236942 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:29:34.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:34.240800 systemd[1]: Mounting boot.mount... Oct 2 19:29:34.255168 systemd[1]: Mounted boot.mount. Oct 2 19:29:34.262079 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:29:34.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:34.265915 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:29:34.266000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:34.320095 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:29:34.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:34.322616 systemd[1]: Starting audit-rules.service... Oct 2 19:29:34.323817 ldconfig[1072]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:29:34.324748 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:29:34.327083 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:29:34.328000 audit: BPF prog-id=24 op=LOAD Oct 2 19:29:34.330030 systemd[1]: Starting systemd-resolved.service... Oct 2 19:29:34.332000 audit: BPF prog-id=25 op=LOAD Oct 2 19:29:34.335891 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:29:34.337946 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:29:34.339298 systemd[1]: Finished ldconfig.service. Oct 2 19:29:34.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:34.340469 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:29:34.340000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:34.341876 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:29:34.344313 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:29:34.344000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:34.346000 audit[1096]: SYSTEM_BOOT pid=1096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:29:34.346658 systemd[1]: Starting systemd-update-done.service... Oct 2 19:29:34.352819 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:29:34.353000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:34.354130 systemd[1]: Finished systemd-update-done.service. Oct 2 19:29:34.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:34.370863 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:29:34.387000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:29:34.387000 audit[1106]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffea969d80 a2=420 a3=0 items=0 ppid=1085 pid=1106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:34.387000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:29:34.388470 augenrules[1106]: No rules Oct 2 19:29:34.389345 systemd[1]: Finished audit-rules.service. Oct 2 19:29:34.416959 systemd-resolved[1089]: Positive Trust Anchors: Oct 2 19:29:34.416973 systemd-resolved[1089]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:29:34.417001 systemd-resolved[1089]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:29:34.421347 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:29:34.885702 systemd-timesyncd[1095]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 2 19:29:34.885786 systemd-timesyncd[1095]: Initial clock synchronization to Mon 2023-10-02 19:29:34.885612 UTC. Oct 2 19:29:34.886225 systemd[1]: Reached target time-set.target. Oct 2 19:29:34.912260 systemd-resolved[1089]: Defaulting to hostname 'linux'. Oct 2 19:29:34.913768 systemd[1]: Started systemd-resolved.service. Oct 2 19:29:34.914759 systemd[1]: Reached target network.target. Oct 2 19:29:34.915590 systemd[1]: Reached target nss-lookup.target. Oct 2 19:29:34.916464 systemd[1]: Reached target sysinit.target. Oct 2 19:29:34.917351 systemd[1]: Started motdgen.path. Oct 2 19:29:34.918094 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:29:34.919431 systemd[1]: Started logrotate.timer. Oct 2 19:29:34.920314 systemd[1]: Started mdadm.timer. Oct 2 19:29:34.921014 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:29:34.921928 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:29:34.921964 systemd[1]: Reached target paths.target. Oct 2 19:29:34.922757 systemd[1]: Reached target timers.target. Oct 2 19:29:34.923904 systemd[1]: Listening on dbus.socket. Oct 2 19:29:34.925745 systemd[1]: Starting docker.socket... Oct 2 19:29:34.929267 systemd[1]: Listening on sshd.socket. Oct 2 19:29:34.930194 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:29:34.930874 systemd[1]: Listening on docker.socket. Oct 2 19:29:34.931740 systemd[1]: Reached target sockets.target. Oct 2 19:29:34.932579 systemd[1]: Reached target basic.target. Oct 2 19:29:34.933402 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:29:34.933435 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:29:34.934619 systemd[1]: Starting containerd.service... Oct 2 19:29:34.936483 systemd[1]: Starting dbus.service... Oct 2 19:29:34.938090 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:29:34.939990 systemd[1]: Starting extend-filesystems.service... Oct 2 19:29:34.940977 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:29:34.942364 systemd[1]: Starting motdgen.service... Oct 2 19:29:34.944253 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:29:34.946096 jq[1116]: false Oct 2 19:29:34.946174 systemd[1]: Starting prepare-critools.service... Oct 2 19:29:34.950329 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:29:34.952487 systemd[1]: Starting sshd-keygen.service... Oct 2 19:29:34.955316 systemd[1]: Starting systemd-logind.service... Oct 2 19:29:34.956089 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:29:34.956192 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:29:34.956660 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:29:34.957440 systemd[1]: Starting update-engine.service... Oct 2 19:29:34.959678 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:29:34.962983 extend-filesystems[1117]: Found vda Oct 2 19:29:34.962983 extend-filesystems[1117]: Found vda1 Oct 2 19:29:34.962983 extend-filesystems[1117]: Found vda2 Oct 2 19:29:34.962983 extend-filesystems[1117]: Found vda3 Oct 2 19:29:34.962983 extend-filesystems[1117]: Found usr Oct 2 19:29:34.962983 extend-filesystems[1117]: Found vda4 Oct 2 19:29:34.962983 extend-filesystems[1117]: Found vda6 Oct 2 19:29:34.962983 extend-filesystems[1117]: Found vda7 Oct 2 19:29:34.962983 extend-filesystems[1117]: Found vda9 Oct 2 19:29:34.962983 extend-filesystems[1117]: Checking size of /dev/vda9 Oct 2 19:29:34.962592 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:29:34.991493 jq[1133]: true Oct 2 19:29:34.963526 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:29:34.965157 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:29:34.991907 tar[1137]: crictl Oct 2 19:29:34.965351 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:29:34.992205 jq[1139]: true Oct 2 19:29:34.977999 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:29:34.978189 systemd[1]: Finished motdgen.service. Oct 2 19:29:34.992487 tar[1136]: ./ Oct 2 19:29:34.992487 tar[1136]: ./loopback Oct 2 19:29:35.001086 dbus-daemon[1115]: [system] SELinux support is enabled Oct 2 19:29:35.001274 systemd[1]: Started dbus.service. Oct 2 19:29:35.004876 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:29:35.004916 systemd[1]: Reached target system-config.target. Oct 2 19:29:35.006043 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:29:35.006065 systemd[1]: Reached target user-config.target. Oct 2 19:29:35.015980 extend-filesystems[1117]: Old size kept for /dev/vda9 Oct 2 19:29:35.017620 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:29:35.017800 systemd[1]: Finished extend-filesystems.service. Oct 2 19:29:35.057818 tar[1136]: ./bandwidth Oct 2 19:29:35.060678 systemd-logind[1131]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 19:29:35.062632 systemd-logind[1131]: New seat seat0. Oct 2 19:29:35.071750 systemd[1]: Started systemd-logind.service. Oct 2 19:29:35.077538 bash[1167]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:29:35.085508 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:29:35.108921 update_engine[1132]: I1002 19:29:35.108636 1132 main.cc:92] Flatcar Update Engine starting Oct 2 19:29:35.111880 env[1141]: time="2023-10-02T19:29:35.111569904Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:29:35.114820 update_engine[1132]: I1002 19:29:35.114791 1132 update_check_scheduler.cc:74] Next update check in 9m18s Oct 2 19:29:35.115334 systemd[1]: Started update-engine.service. Oct 2 19:29:35.116192 tar[1136]: ./ptp Oct 2 19:29:35.118077 systemd[1]: Started locksmithd.service. Oct 2 19:29:35.160805 tar[1136]: ./vlan Oct 2 19:29:35.161705 env[1141]: time="2023-10-02T19:29:35.161662864Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:29:35.161954 env[1141]: time="2023-10-02T19:29:35.161931544Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:29:35.164431 env[1141]: time="2023-10-02T19:29:35.164389824Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:29:35.164431 env[1141]: time="2023-10-02T19:29:35.164427704Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:29:35.164679 env[1141]: time="2023-10-02T19:29:35.164650824Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:29:35.164679 env[1141]: time="2023-10-02T19:29:35.164674784Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:29:35.164760 env[1141]: time="2023-10-02T19:29:35.164690384Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:29:35.164760 env[1141]: time="2023-10-02T19:29:35.164700504Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:29:35.164800 env[1141]: time="2023-10-02T19:29:35.164788624Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:29:35.165193 env[1141]: time="2023-10-02T19:29:35.165168024Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:29:35.165330 env[1141]: time="2023-10-02T19:29:35.165305624Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:29:35.165330 env[1141]: time="2023-10-02T19:29:35.165326424Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:29:35.165397 env[1141]: time="2023-10-02T19:29:35.165384544Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:29:35.165422 env[1141]: time="2023-10-02T19:29:35.165398584Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:29:35.172266 env[1141]: time="2023-10-02T19:29:35.172232784Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:29:35.172266 env[1141]: time="2023-10-02T19:29:35.172267184Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:29:35.172427 env[1141]: time="2023-10-02T19:29:35.172281144Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:29:35.172427 env[1141]: time="2023-10-02T19:29:35.172318504Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:29:35.172427 env[1141]: time="2023-10-02T19:29:35.172334184Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:29:35.172427 env[1141]: time="2023-10-02T19:29:35.172347744Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:29:35.172507 env[1141]: time="2023-10-02T19:29:35.172360504Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:29:35.172809 env[1141]: time="2023-10-02T19:29:35.172779744Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:29:35.172809 env[1141]: time="2023-10-02T19:29:35.172807504Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:29:35.172875 env[1141]: time="2023-10-02T19:29:35.172822424Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:29:35.172875 env[1141]: time="2023-10-02T19:29:35.172834384Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:29:35.172875 env[1141]: time="2023-10-02T19:29:35.172846744Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:29:35.172987 env[1141]: time="2023-10-02T19:29:35.172966304Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:29:35.173070 env[1141]: time="2023-10-02T19:29:35.173052984Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:29:35.173297 env[1141]: time="2023-10-02T19:29:35.173275384Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:29:35.173338 env[1141]: time="2023-10-02T19:29:35.173305384Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:29:35.173338 env[1141]: time="2023-10-02T19:29:35.173319464Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:29:35.173447 env[1141]: time="2023-10-02T19:29:35.173433904Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:29:35.173489 env[1141]: time="2023-10-02T19:29:35.173455664Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:29:35.173519 env[1141]: time="2023-10-02T19:29:35.173487424Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:29:35.173519 env[1141]: time="2023-10-02T19:29:35.173499944Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:29:35.173519 env[1141]: time="2023-10-02T19:29:35.173511704Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:29:35.173601 env[1141]: time="2023-10-02T19:29:35.173523904Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:29:35.173601 env[1141]: time="2023-10-02T19:29:35.173535584Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:29:35.173601 env[1141]: time="2023-10-02T19:29:35.173547024Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:29:35.173601 env[1141]: time="2023-10-02T19:29:35.173559264Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:29:35.173770 env[1141]: time="2023-10-02T19:29:35.173675904Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:29:35.173770 env[1141]: time="2023-10-02T19:29:35.173712704Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:29:35.173770 env[1141]: time="2023-10-02T19:29:35.173733824Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:29:35.173770 env[1141]: time="2023-10-02T19:29:35.173746464Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:29:35.173770 env[1141]: time="2023-10-02T19:29:35.173760224Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:29:35.173770 env[1141]: time="2023-10-02T19:29:35.173772024Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:29:35.173902 env[1141]: time="2023-10-02T19:29:35.173788704Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:29:35.173902 env[1141]: time="2023-10-02T19:29:35.173822024Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:29:35.174070 env[1141]: time="2023-10-02T19:29:35.174016624Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:29:35.177199 env[1141]: time="2023-10-02T19:29:35.174075224Z" level=info msg="Connect containerd service" Oct 2 19:29:35.177199 env[1141]: time="2023-10-02T19:29:35.174104704Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:29:35.177199 env[1141]: time="2023-10-02T19:29:35.174713384Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:29:35.177199 env[1141]: time="2023-10-02T19:29:35.175104944Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:29:35.177199 env[1141]: time="2023-10-02T19:29:35.175175304Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:29:35.177199 env[1141]: time="2023-10-02T19:29:35.175222384Z" level=info msg="containerd successfully booted in 0.064548s" Oct 2 19:29:35.177199 env[1141]: time="2023-10-02T19:29:35.176914104Z" level=info msg="Start subscribing containerd event" Oct 2 19:29:35.177199 env[1141]: time="2023-10-02T19:29:35.176965344Z" level=info msg="Start recovering state" Oct 2 19:29:35.177199 env[1141]: time="2023-10-02T19:29:35.177030424Z" level=info msg="Start event monitor" Oct 2 19:29:35.177199 env[1141]: time="2023-10-02T19:29:35.177069224Z" level=info msg="Start snapshots syncer" Oct 2 19:29:35.177199 env[1141]: time="2023-10-02T19:29:35.177083984Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:29:35.177199 env[1141]: time="2023-10-02T19:29:35.177092344Z" level=info msg="Start streaming server" Oct 2 19:29:35.175311 systemd[1]: Started containerd.service. Oct 2 19:29:35.204937 tar[1136]: ./host-device Oct 2 19:29:35.234722 locksmithd[1171]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:29:35.239220 tar[1136]: ./tuning Oct 2 19:29:35.269219 tar[1136]: ./vrf Oct 2 19:29:35.300021 tar[1136]: ./sbr Oct 2 19:29:35.330170 tar[1136]: ./tap Oct 2 19:29:35.365086 tar[1136]: ./dhcp Oct 2 19:29:35.418787 systemd[1]: Finished prepare-critools.service. Oct 2 19:29:35.438785 tar[1136]: ./static Oct 2 19:29:35.459948 tar[1136]: ./firewall Oct 2 19:29:35.491906 tar[1136]: ./macvlan Oct 2 19:29:35.520971 tar[1136]: ./dummy Oct 2 19:29:35.549582 tar[1136]: ./bridge Oct 2 19:29:35.580738 tar[1136]: ./ipvlan Oct 2 19:29:35.609438 tar[1136]: ./portmap Oct 2 19:29:35.636783 tar[1136]: ./host-local Oct 2 19:29:35.674916 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:29:35.898144 sshd_keygen[1144]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:29:35.919236 systemd[1]: Finished sshd-keygen.service. Oct 2 19:29:35.921685 systemd[1]: Starting issuegen.service... Oct 2 19:29:35.927673 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:29:35.927845 systemd[1]: Finished issuegen.service. Oct 2 19:29:35.930285 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:29:35.937786 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:29:35.940311 systemd[1]: Started getty@tty1.service. Oct 2 19:29:35.942683 systemd[1]: Started serial-getty@ttyAMA0.service. Oct 2 19:29:35.943854 systemd[1]: Reached target getty.target. Oct 2 19:29:35.944782 systemd[1]: Reached target multi-user.target. Oct 2 19:29:35.947315 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:29:35.954908 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:29:35.955079 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:29:35.956320 systemd[1]: Startup finished in 667ms (kernel) + 6.556s (initrd) + 4.358s (userspace) = 11.582s. Oct 2 19:29:36.181233 systemd-networkd[1049]: eth0: Gained IPv6LL Oct 2 19:29:37.868217 systemd[1]: Created slice system-sshd.slice. Oct 2 19:29:37.869663 systemd[1]: Started sshd@0-10.0.0.8:22-10.0.0.1:57934.service. Oct 2 19:29:37.966008 sshd[1197]: Accepted publickey for core from 10.0.0.1 port 57934 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:29:37.967496 sshd[1197]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:29:37.987074 systemd-logind[1131]: New session 1 of user core. Oct 2 19:29:37.988261 systemd[1]: Created slice user-500.slice. Oct 2 19:29:37.989484 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:29:38.001215 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:29:38.002708 systemd[1]: Starting user@500.service... Oct 2 19:29:38.006003 (systemd)[1200]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:29:38.082399 systemd[1200]: Queued start job for default target default.target. Oct 2 19:29:38.082899 systemd[1200]: Reached target paths.target. Oct 2 19:29:38.082919 systemd[1200]: Reached target sockets.target. Oct 2 19:29:38.082930 systemd[1200]: Reached target timers.target. Oct 2 19:29:38.082939 systemd[1200]: Reached target basic.target. Oct 2 19:29:38.082989 systemd[1200]: Reached target default.target. Oct 2 19:29:38.083011 systemd[1200]: Startup finished in 70ms. Oct 2 19:29:38.083255 systemd[1]: Started user@500.service. Oct 2 19:29:38.093869 systemd[1]: Started session-1.scope. Oct 2 19:29:38.157924 systemd[1]: Started sshd@1-10.0.0.8:22-10.0.0.1:57936.service. Oct 2 19:29:38.204272 sshd[1209]: Accepted publickey for core from 10.0.0.1 port 57936 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:29:38.205882 sshd[1209]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:29:38.209967 systemd-logind[1131]: New session 2 of user core. Oct 2 19:29:38.210416 systemd[1]: Started session-2.scope. Oct 2 19:29:38.271801 sshd[1209]: pam_unix(sshd:session): session closed for user core Oct 2 19:29:38.275938 systemd[1]: Started sshd@2-10.0.0.8:22-10.0.0.1:57948.service. Oct 2 19:29:38.276437 systemd[1]: sshd@1-10.0.0.8:22-10.0.0.1:57936.service: Deactivated successfully. Oct 2 19:29:38.277211 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:29:38.277721 systemd-logind[1131]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:29:38.278596 systemd-logind[1131]: Removed session 2. Oct 2 19:29:38.321184 sshd[1214]: Accepted publickey for core from 10.0.0.1 port 57948 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:29:38.322629 sshd[1214]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:29:38.326328 systemd-logind[1131]: New session 3 of user core. Oct 2 19:29:38.327198 systemd[1]: Started session-3.scope. Oct 2 19:29:38.379795 sshd[1214]: pam_unix(sshd:session): session closed for user core Oct 2 19:29:38.384895 systemd[1]: sshd@2-10.0.0.8:22-10.0.0.1:57948.service: Deactivated successfully. Oct 2 19:29:38.385552 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:29:38.386138 systemd-logind[1131]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:29:38.387343 systemd[1]: Started sshd@3-10.0.0.8:22-10.0.0.1:57956.service. Oct 2 19:29:38.388291 systemd-logind[1131]: Removed session 3. Oct 2 19:29:38.432085 sshd[1221]: Accepted publickey for core from 10.0.0.1 port 57956 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:29:38.433221 sshd[1221]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:29:38.436603 systemd-logind[1131]: New session 4 of user core. Oct 2 19:29:38.437470 systemd[1]: Started session-4.scope. Oct 2 19:29:38.495623 sshd[1221]: pam_unix(sshd:session): session closed for user core Oct 2 19:29:38.498648 systemd[1]: sshd@3-10.0.0.8:22-10.0.0.1:57956.service: Deactivated successfully. Oct 2 19:29:38.499273 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:29:38.499780 systemd-logind[1131]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:29:38.501060 systemd[1]: Started sshd@4-10.0.0.8:22-10.0.0.1:57960.service. Oct 2 19:29:38.501806 systemd-logind[1131]: Removed session 4. Oct 2 19:29:38.545007 sshd[1227]: Accepted publickey for core from 10.0.0.1 port 57960 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:29:38.546296 sshd[1227]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:29:38.549839 systemd-logind[1131]: New session 5 of user core. Oct 2 19:29:38.550672 systemd[1]: Started session-5.scope. Oct 2 19:29:38.629619 sudo[1230]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:29:38.629842 sudo[1230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:29:38.641908 dbus-daemon[1115]: avc: received setenforce notice (enforcing=1) Oct 2 19:29:38.643195 sudo[1230]: pam_unix(sudo:session): session closed for user root Oct 2 19:29:38.648480 sshd[1227]: pam_unix(sshd:session): session closed for user core Oct 2 19:29:38.651514 systemd[1]: sshd@4-10.0.0.8:22-10.0.0.1:57960.service: Deactivated successfully. Oct 2 19:29:38.652152 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:29:38.652647 systemd-logind[1131]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:29:38.653824 systemd[1]: Started sshd@5-10.0.0.8:22-10.0.0.1:57968.service. Oct 2 19:29:38.654388 systemd-logind[1131]: Removed session 5. Oct 2 19:29:38.698772 sshd[1234]: Accepted publickey for core from 10.0.0.1 port 57968 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:29:38.700658 sshd[1234]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:29:38.704105 systemd-logind[1131]: New session 6 of user core. Oct 2 19:29:38.704952 systemd[1]: Started session-6.scope. Oct 2 19:29:38.759290 sudo[1238]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:29:38.759500 sudo[1238]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:29:38.762482 sudo[1238]: pam_unix(sudo:session): session closed for user root Oct 2 19:29:38.767474 sudo[1237]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:29:38.767674 sudo[1237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:29:38.776837 systemd[1]: Stopping audit-rules.service... Oct 2 19:29:38.777000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:29:38.779226 auditctl[1241]: No rules Oct 2 19:29:38.779509 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:29:38.779675 systemd[1]: Stopped audit-rules.service. Oct 2 19:29:38.780762 kernel: kauditd_printk_skb: 115 callbacks suppressed Oct 2 19:29:38.780811 kernel: audit: type=1305 audit(1696274978.777:155): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:29:38.780828 kernel: audit: type=1300 audit(1696274978.777:155): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff9456f90 a2=420 a3=0 items=0 ppid=1 pid=1241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:38.777000 audit[1241]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff9456f90 a2=420 a3=0 items=0 ppid=1 pid=1241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:38.781204 systemd[1]: Starting audit-rules.service... Oct 2 19:29:38.777000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:29:38.785503 kernel: audit: type=1327 audit(1696274978.777:155): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:29:38.785534 kernel: audit: type=1131 audit(1696274978.778:156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:38.778000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:38.800932 augenrules[1258]: No rules Oct 2 19:29:38.801637 systemd[1]: Finished audit-rules.service. Oct 2 19:29:38.800000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:38.802777 sudo[1237]: pam_unix(sudo:session): session closed for user root Oct 2 19:29:38.801000 audit[1237]: USER_END pid=1237 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:29:38.805226 sshd[1234]: pam_unix(sshd:session): session closed for user core Oct 2 19:29:38.807751 systemd[1]: sshd@5-10.0.0.8:22-10.0.0.1:57968.service: Deactivated successfully. Oct 2 19:29:38.808421 kernel: audit: type=1130 audit(1696274978.800:157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:38.808495 kernel: audit: type=1106 audit(1696274978.801:158): pid=1237 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:29:38.801000 audit[1237]: CRED_DISP pid=1237 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:29:38.808512 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:29:38.811222 kernel: audit: type=1104 audit(1696274978.801:159): pid=1237 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:29:38.811283 kernel: audit: type=1106 audit(1696274978.804:160): pid=1234 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:38.804000 audit[1234]: USER_END pid=1234 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:38.812306 systemd-logind[1131]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:29:38.813596 systemd[1]: Started sshd@6-10.0.0.8:22-10.0.0.1:57974.service. Oct 2 19:29:38.814389 systemd-logind[1131]: Removed session 6. Oct 2 19:29:38.814756 kernel: audit: type=1104 audit(1696274978.805:161): pid=1234 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:38.805000 audit[1234]: CRED_DISP pid=1234 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:38.806000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.8:22-10.0.0.1:57968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:38.820443 kernel: audit: type=1131 audit(1696274978.806:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.8:22-10.0.0.1:57968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:38.812000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.8:22-10.0.0.1:57974 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:38.859000 audit[1264]: USER_ACCT pid=1264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:38.860490 sshd[1264]: Accepted publickey for core from 10.0.0.1 port 57974 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:29:38.860000 audit[1264]: CRED_ACQ pid=1264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:38.860000 audit[1264]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1b8d040 a2=3 a3=1 items=0 ppid=1 pid=1264 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:38.860000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:38.861971 sshd[1264]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:29:38.866233 systemd-logind[1131]: New session 7 of user core. Oct 2 19:29:38.866677 systemd[1]: Started session-7.scope. Oct 2 19:29:38.869000 audit[1264]: USER_START pid=1264 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:38.871000 audit[1266]: CRED_ACQ pid=1266 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:29:38.923264 sudo[1267]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:29:38.922000 audit[1267]: USER_ACCT pid=1267 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:29:38.922000 audit[1267]: CRED_REFR pid=1267 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:29:38.923474 sudo[1267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:29:38.923000 audit[1267]: USER_START pid=1267 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:29:39.614673 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:29:39.621813 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:29:39.620000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:39.622336 systemd[1]: Reached target network-online.target. Oct 2 19:29:39.625014 systemd[1]: Starting docker.service... Oct 2 19:29:39.791470 env[1285]: time="2023-10-02T19:29:39.791406784Z" level=info msg="Starting up" Oct 2 19:29:39.793382 env[1285]: time="2023-10-02T19:29:39.793355744Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:29:39.793382 env[1285]: time="2023-10-02T19:29:39.793379344Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:29:39.793466 env[1285]: time="2023-10-02T19:29:39.793398624Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:29:39.793466 env[1285]: time="2023-10-02T19:29:39.793410224Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:29:39.796955 env[1285]: time="2023-10-02T19:29:39.796929224Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:29:39.796955 env[1285]: time="2023-10-02T19:29:39.796951144Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:29:39.797064 env[1285]: time="2023-10-02T19:29:39.796968304Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:29:39.797064 env[1285]: time="2023-10-02T19:29:39.796978344Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:29:40.042307 env[1285]: time="2023-10-02T19:29:40.042205984Z" level=info msg="Loading containers: start." Oct 2 19:29:40.085000 audit[1321]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1321 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.085000 audit[1321]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffd9d419a0 a2=0 a3=1 items=0 ppid=1285 pid=1321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.085000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:29:40.087000 audit[1323]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1323 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.087000 audit[1323]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffff4745b0 a2=0 a3=1 items=0 ppid=1285 pid=1323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.087000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:29:40.089000 audit[1325]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1325 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.089000 audit[1325]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffaad0e70 a2=0 a3=1 items=0 ppid=1285 pid=1325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.089000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:29:40.091000 audit[1327]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.091000 audit[1327]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffee2c820 a2=0 a3=1 items=0 ppid=1285 pid=1327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.091000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:29:40.096000 audit[1329]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1329 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.096000 audit[1329]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffffc3e3b20 a2=0 a3=1 items=0 ppid=1285 pid=1329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.096000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:29:40.121000 audit[1334]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1334 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.121000 audit[1334]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd6da18d0 a2=0 a3=1 items=0 ppid=1285 pid=1334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.121000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:29:40.127000 audit[1336]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1336 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.127000 audit[1336]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe8432c40 a2=0 a3=1 items=0 ppid=1285 pid=1336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.127000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:29:40.129000 audit[1338]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1338 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.129000 audit[1338]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffd4dec770 a2=0 a3=1 items=0 ppid=1285 pid=1338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.129000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:29:40.131000 audit[1340]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1340 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.131000 audit[1340]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=fffffe72c160 a2=0 a3=1 items=0 ppid=1285 pid=1340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.131000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:29:40.139000 audit[1344]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1344 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.139000 audit[1344]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffcc027ca0 a2=0 a3=1 items=0 ppid=1285 pid=1344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.139000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:29:40.140000 audit[1345]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1345 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.140000 audit[1345]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd034ada0 a2=0 a3=1 items=0 ppid=1285 pid=1345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.140000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:29:40.148163 kernel: Initializing XFRM netlink socket Oct 2 19:29:40.172815 env[1285]: time="2023-10-02T19:29:40.172767384Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:29:40.186000 audit[1353]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1353 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.186000 audit[1353]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffd95c2ac0 a2=0 a3=1 items=0 ppid=1285 pid=1353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.186000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:29:40.205000 audit[1356]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1356 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.205000 audit[1356]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffc4467530 a2=0 a3=1 items=0 ppid=1285 pid=1356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.205000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:29:40.208000 audit[1359]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1359 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.208000 audit[1359]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd39e7a40 a2=0 a3=1 items=0 ppid=1285 pid=1359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.208000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:29:40.210000 audit[1361]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1361 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.210000 audit[1361]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd33d31d0 a2=0 a3=1 items=0 ppid=1285 pid=1361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.210000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:29:40.212000 audit[1363]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1363 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.212000 audit[1363]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffff8df9b0 a2=0 a3=1 items=0 ppid=1285 pid=1363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.212000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:29:40.214000 audit[1365]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1365 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.214000 audit[1365]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffcd9445a0 a2=0 a3=1 items=0 ppid=1285 pid=1365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.214000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:29:40.216000 audit[1367]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1367 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.216000 audit[1367]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffd980fa90 a2=0 a3=1 items=0 ppid=1285 pid=1367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.216000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:29:40.223000 audit[1370]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1370 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.223000 audit[1370]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffdec836d0 a2=0 a3=1 items=0 ppid=1285 pid=1370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.223000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:29:40.225000 audit[1372]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1372 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.225000 audit[1372]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffe20a45b0 a2=0 a3=1 items=0 ppid=1285 pid=1372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.225000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:29:40.227000 audit[1374]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1374 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.227000 audit[1374]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffdb79c2b0 a2=0 a3=1 items=0 ppid=1285 pid=1374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.227000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:29:40.229000 audit[1376]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1376 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.229000 audit[1376]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc7d3a3d0 a2=0 a3=1 items=0 ppid=1285 pid=1376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.229000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:29:40.231215 systemd-networkd[1049]: docker0: Link UP Oct 2 19:29:40.237000 audit[1380]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1380 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.237000 audit[1380]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffdc5c9090 a2=0 a3=1 items=0 ppid=1285 pid=1380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.237000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:29:40.238000 audit[1381]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1381 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:29:40.238000 audit[1381]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe95a6d50 a2=0 a3=1 items=0 ppid=1285 pid=1381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:40.238000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:29:40.239942 env[1285]: time="2023-10-02T19:29:40.239901944Z" level=info msg="Loading containers: done." Oct 2 19:29:40.258668 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck4150728010-merged.mount: Deactivated successfully. Oct 2 19:29:40.261797 env[1285]: time="2023-10-02T19:29:40.261757144Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:29:40.262085 env[1285]: time="2023-10-02T19:29:40.262063104Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:29:40.262291 env[1285]: time="2023-10-02T19:29:40.262272384Z" level=info msg="Daemon has completed initialization" Oct 2 19:29:40.276875 systemd[1]: Started docker.service. Oct 2 19:29:40.275000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:40.283662 env[1285]: time="2023-10-02T19:29:40.283611384Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:29:40.301233 systemd[1]: Reloading. Oct 2 19:29:40.354434 /usr/lib/systemd/system-generators/torcx-generator[1429]: time="2023-10-02T19:29:40Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:29:40.354461 /usr/lib/systemd/system-generators/torcx-generator[1429]: time="2023-10-02T19:29:40Z" level=info msg="torcx already run" Oct 2 19:29:40.402571 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:29:40.402593 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:29:40.418022 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:29:40.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.466000 audit: BPF prog-id=31 op=LOAD Oct 2 19:29:40.466000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit: BPF prog-id=32 op=LOAD Oct 2 19:29:40.467000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit: BPF prog-id=33 op=LOAD Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit: BPF prog-id=34 op=LOAD Oct 2 19:29:40.467000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:29:40.467000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.467000 audit: BPF prog-id=35 op=LOAD Oct 2 19:29:40.467000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:29:40.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.468000 audit: BPF prog-id=36 op=LOAD Oct 2 19:29:40.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.468000 audit: BPF prog-id=37 op=LOAD Oct 2 19:29:40.468000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:29:40.468000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit: BPF prog-id=38 op=LOAD Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit: BPF prog-id=39 op=LOAD Oct 2 19:29:40.470000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:29:40.470000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.471000 audit: BPF prog-id=40 op=LOAD Oct 2 19:29:40.471000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:29:40.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.471000 audit: BPF prog-id=41 op=LOAD Oct 2 19:29:40.471000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:29:40.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit: BPF prog-id=42 op=LOAD Oct 2 19:29:40.473000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit: BPF prog-id=43 op=LOAD Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit: BPF prog-id=44 op=LOAD Oct 2 19:29:40.473000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:29:40.473000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:29:40.473000 audit: BPF prog-id=45 op=LOAD Oct 2 19:29:40.473000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:29:40.481231 systemd[1]: Started kubelet.service. Oct 2 19:29:40.480000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:40.634167 kubelet[1466]: E1002 19:29:40.631877 1466 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:29:40.637090 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:29:40.637250 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:29:40.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:29:40.882414 env[1141]: time="2023-10-02T19:29:40.882354144Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\"" Oct 2 19:29:41.511801 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3458909617.mount: Deactivated successfully. Oct 2 19:29:44.221712 env[1141]: time="2023-10-02T19:29:44.221653384Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:44.237918 env[1141]: time="2023-10-02T19:29:44.237849104Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:84fc12f356926a06f93f99d06ff6b5c8df1d39c609ddaae4aaf09048dc816c36,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:44.252630 env[1141]: time="2023-10-02T19:29:44.252575424Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:44.259486 env[1141]: time="2023-10-02T19:29:44.259424624Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5e7a0196a7908cb49bcbf751d2546a008c329ff1e70c26c1cd542e0ada4b623c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:44.260296 env[1141]: time="2023-10-02T19:29:44.260253984Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\" returns image reference \"sha256:84fc12f356926a06f93f99d06ff6b5c8df1d39c609ddaae4aaf09048dc816c36\"" Oct 2 19:29:44.274346 env[1141]: time="2023-10-02T19:29:44.274310744Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\"" Oct 2 19:29:46.654342 env[1141]: time="2023-10-02T19:29:46.654291664Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:46.657929 env[1141]: time="2023-10-02T19:29:46.657885304Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:66b19e3051492d4e2377e15803f07d9bd2a4578c7e26e5fa088582d59e08884b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:46.659572 env[1141]: time="2023-10-02T19:29:46.659537424Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:46.663129 env[1141]: time="2023-10-02T19:29:46.663082824Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:c76ca5b0cf607f82c54d51c3c6766da30c9a9f684065e1cac761ea9b07b74e97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:46.663985 env[1141]: time="2023-10-02T19:29:46.663944104Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\" returns image reference \"sha256:66b19e3051492d4e2377e15803f07d9bd2a4578c7e26e5fa088582d59e08884b\"" Oct 2 19:29:46.675013 env[1141]: time="2023-10-02T19:29:46.674971704Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\"" Oct 2 19:29:48.268182 env[1141]: time="2023-10-02T19:29:48.268084224Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:48.269231 env[1141]: time="2023-10-02T19:29:48.269200904Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1faa1d898c625343f7c70abbc8e9d160eb6dc3002ec2481cf8f4abd61dc34eed,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:48.271058 env[1141]: time="2023-10-02T19:29:48.271018784Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:48.272616 env[1141]: time="2023-10-02T19:29:48.272585384Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:bb227512d96e93dd3fe356cef552cc3f78905f36330b762adde23c3f0943d57b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:48.273464 env[1141]: time="2023-10-02T19:29:48.273434384Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\" returns image reference \"sha256:1faa1d898c625343f7c70abbc8e9d160eb6dc3002ec2481cf8f4abd61dc34eed\"" Oct 2 19:29:48.285436 env[1141]: time="2023-10-02T19:29:48.285396584Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\"" Oct 2 19:29:49.576341 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1458544042.mount: Deactivated successfully. Oct 2 19:29:50.021972 env[1141]: time="2023-10-02T19:29:50.021861024Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:50.023498 env[1141]: time="2023-10-02T19:29:50.023454224Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95195e68173b6cfcdd3125d7bbffa6759189df53b60ffe7a72256059cd5dd7af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:50.025191 env[1141]: time="2023-10-02T19:29:50.025163704Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:50.026678 env[1141]: time="2023-10-02T19:29:50.026636624Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:8e9eff2f6d0b398f9ac5f5a15c1cb7d5f468f28d64a78d593d57f72a969a54ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:50.027179 env[1141]: time="2023-10-02T19:29:50.027154824Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\" returns image reference \"sha256:95195e68173b6cfcdd3125d7bbffa6759189df53b60ffe7a72256059cd5dd7af\"" Oct 2 19:29:50.038736 env[1141]: time="2023-10-02T19:29:50.038698824Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:29:50.524916 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2292035479.mount: Deactivated successfully. Oct 2 19:29:50.531404 env[1141]: time="2023-10-02T19:29:50.531355304Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:50.533305 env[1141]: time="2023-10-02T19:29:50.533258784Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:50.534675 env[1141]: time="2023-10-02T19:29:50.534635944Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:50.536774 env[1141]: time="2023-10-02T19:29:50.536731464Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:50.537360 env[1141]: time="2023-10-02T19:29:50.537333504Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 19:29:50.548624 env[1141]: time="2023-10-02T19:29:50.548589504Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Oct 2 19:29:50.888041 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:29:50.888263 systemd[1]: Stopped kubelet.service. Oct 2 19:29:50.887000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:50.889286 kernel: kauditd_printk_skb: 259 callbacks suppressed Oct 2 19:29:50.889365 kernel: audit: type=1130 audit(1696274990.887:372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:50.889862 systemd[1]: Started kubelet.service. Oct 2 19:29:50.887000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:50.894625 kernel: audit: type=1131 audit(1696274990.887:373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:50.894814 kernel: audit: type=1130 audit(1696274990.888:374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:50.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:50.941633 kubelet[1521]: E1002 19:29:50.941577 1521 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:29:50.944385 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:29:50.944521 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:29:50.943000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:29:50.948145 kernel: audit: type=1131 audit(1696274990.943:375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:29:51.410358 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2218509153.mount: Deactivated successfully. Oct 2 19:29:54.000057 env[1141]: time="2023-10-02T19:29:54.000001104Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:54.001247 env[1141]: time="2023-10-02T19:29:54.001220144Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:54.002869 env[1141]: time="2023-10-02T19:29:54.002835064Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:54.005035 env[1141]: time="2023-10-02T19:29:54.004996864Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:54.009732 env[1141]: time="2023-10-02T19:29:54.009697264Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737\"" Oct 2 19:29:54.020364 env[1141]: time="2023-10-02T19:29:54.020325904Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:29:54.574214 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2795747390.mount: Deactivated successfully. Oct 2 19:29:55.303434 env[1141]: time="2023-10-02T19:29:55.303370424Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:55.305032 env[1141]: time="2023-10-02T19:29:55.304989744Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:55.306305 env[1141]: time="2023-10-02T19:29:55.306274424Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:55.309007 env[1141]: time="2023-10-02T19:29:55.308976944Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:29:55.309564 env[1141]: time="2023-10-02T19:29:55.309535944Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Oct 2 19:29:59.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:59.869254 systemd[1]: Stopped kubelet.service. Oct 2 19:29:59.868000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:59.874444 kernel: audit: type=1130 audit(1696274999.868:376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:59.874535 kernel: audit: type=1131 audit(1696274999.868:377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:59.896709 systemd[1]: Reloading. Oct 2 19:29:59.958556 /usr/lib/systemd/system-generators/torcx-generator[1630]: time="2023-10-02T19:29:59Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:29:59.958585 /usr/lib/systemd/system-generators/torcx-generator[1630]: time="2023-10-02T19:29:59Z" level=info msg="torcx already run" Oct 2 19:30:00.030869 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:30:00.030888 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:30:00.046633 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:30:00.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.102625 kernel: audit: type=1400 audit(1696275000.096:378): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.102668 kernel: audit: type=1400 audit(1696275000.096:379): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.102686 kernel: audit: type=1400 audit(1696275000.096:380): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.107284 kernel: audit: type=1400 audit(1696275000.096:381): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.107317 kernel: audit: type=1400 audit(1696275000.096:382): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.111869 kernel: audit: type=1400 audit(1696275000.096:383): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.111904 kernel: audit: type=1400 audit(1696275000.096:384): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.111924 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:30:00.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.099000 audit: BPF prog-id=46 op=LOAD Oct 2 19:30:00.099000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:30:00.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.101000 audit: BPF prog-id=47 op=LOAD Oct 2 19:30:00.101000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:30:00.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.103000 audit: BPF prog-id=48 op=LOAD Oct 2 19:30:00.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.106000 audit: BPF prog-id=49 op=LOAD Oct 2 19:30:00.106000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:30:00.106000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:30:00.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.108000 audit: BPF prog-id=50 op=LOAD Oct 2 19:30:00.108000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:30:00.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.110000 audit: BPF prog-id=51 op=LOAD Oct 2 19:30:00.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.114000 audit: BPF prog-id=52 op=LOAD Oct 2 19:30:00.114000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:30:00.114000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:30:00.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.115000 audit: BPF prog-id=53 op=LOAD Oct 2 19:30:00.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.116000 audit: BPF prog-id=54 op=LOAD Oct 2 19:30:00.116000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:30:00.116000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:30:00.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.116000 audit: BPF prog-id=55 op=LOAD Oct 2 19:30:00.116000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:30:00.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.117000 audit: BPF prog-id=56 op=LOAD Oct 2 19:30:00.117000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit: BPF prog-id=57 op=LOAD Oct 2 19:30:00.118000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit: BPF prog-id=58 op=LOAD Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.118000 audit: BPF prog-id=59 op=LOAD Oct 2 19:30:00.118000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:30:00.118000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:30:00.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:00.119000 audit: BPF prog-id=60 op=LOAD Oct 2 19:30:00.119000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:30:00.133214 systemd[1]: Started kubelet.service. Oct 2 19:30:00.132000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:00.179545 kubelet[1667]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:30:00.179545 kubelet[1667]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:30:00.179545 kubelet[1667]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:30:00.179909 kubelet[1667]: I1002 19:30:00.179593 1667 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:30:01.126899 kubelet[1667]: I1002 19:30:01.126857 1667 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:30:01.126899 kubelet[1667]: I1002 19:30:01.126888 1667 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:30:01.127108 kubelet[1667]: I1002 19:30:01.127095 1667 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:30:01.132194 kubelet[1667]: I1002 19:30:01.132116 1667 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:30:01.132454 kubelet[1667]: E1002 19:30:01.132431 1667 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.8:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:30:01.133912 kubelet[1667]: W1002 19:30:01.133892 1667 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:30:01.134715 kubelet[1667]: I1002 19:30:01.134695 1667 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:30:01.135014 kubelet[1667]: I1002 19:30:01.135001 1667 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:30:01.135181 kubelet[1667]: I1002 19:30:01.135166 1667 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:30:01.135333 kubelet[1667]: I1002 19:30:01.135320 1667 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:30:01.135410 kubelet[1667]: I1002 19:30:01.135401 1667 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:30:01.135543 kubelet[1667]: I1002 19:30:01.135530 1667 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:30:01.138922 kubelet[1667]: I1002 19:30:01.138895 1667 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:30:01.138922 kubelet[1667]: I1002 19:30:01.138920 1667 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:30:01.139015 kubelet[1667]: I1002 19:30:01.138957 1667 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:30:01.139015 kubelet[1667]: I1002 19:30:01.138978 1667 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:30:01.139557 kubelet[1667]: W1002 19:30:01.139493 1667 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.8:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:30:01.139627 kubelet[1667]: E1002 19:30:01.139570 1667 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.8:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:30:01.139657 kubelet[1667]: I1002 19:30:01.139644 1667 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:30:01.139737 kubelet[1667]: W1002 19:30:01.139526 1667 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.8:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:30:01.139802 kubelet[1667]: E1002 19:30:01.139793 1667 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.8:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:30:01.140155 kubelet[1667]: W1002 19:30:01.140142 1667 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:30:01.141176 kubelet[1667]: I1002 19:30:01.141160 1667 server.go:1168] "Started kubelet" Oct 2 19:30:01.141263 kubelet[1667]: I1002 19:30:01.141245 1667 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:30:01.141946 kubelet[1667]: I1002 19:30:01.141920 1667 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:30:01.141000 audit[1667]: AVC avc: denied { mac_admin } for pid=1667 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:01.141000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:30:01.141000 audit[1667]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40007d3320 a1=400092e888 a2=40007d32f0 a3=25 items=0 ppid=1 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:01.141000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:30:01.143134 kubelet[1667]: I1002 19:30:01.143093 1667 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:30:01.142000 audit[1667]: AVC avc: denied { mac_admin } for pid=1667 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:01.142000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:30:01.142000 audit[1667]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d94060 a1=400092e8a0 a2=40007d33b0 a3=25 items=0 ppid=1 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:01.142000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:30:01.143376 kubelet[1667]: I1002 19:30:01.143362 1667 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:30:01.143656 kubelet[1667]: I1002 19:30:01.143629 1667 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:30:01.143792 kubelet[1667]: I1002 19:30:01.143766 1667 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:30:01.144403 kubelet[1667]: E1002 19:30:01.143381 1667 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:30:01.144403 kubelet[1667]: E1002 19:30:01.144397 1667 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:30:01.145136 kubelet[1667]: E1002 19:30:01.145006 1667 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a612054640b18", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 30, 1, 141103384, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 30, 1, 141103384, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.0.0.8:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.8:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:30:01.146256 kubelet[1667]: E1002 19:30:01.146239 1667 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:30:01.146389 kubelet[1667]: I1002 19:30:01.146377 1667 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:30:01.146729 kubelet[1667]: I1002 19:30:01.146707 1667 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:30:01.147598 kubelet[1667]: W1002 19:30:01.147559 1667 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.8:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:30:01.147739 kubelet[1667]: E1002 19:30:01.147725 1667 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.8:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:30:01.147812 kubelet[1667]: E1002 19:30:01.147635 1667 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.8:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.8:6443: connect: connection refused" interval="200ms" Oct 2 19:30:01.151000 audit[1681]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1681 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:01.151000 audit[1681]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc7d13200 a2=0 a3=1 items=0 ppid=1667 pid=1681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:01.151000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:30:01.152000 audit[1682]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1682 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:01.152000 audit[1682]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffa618970 a2=0 a3=1 items=0 ppid=1667 pid=1682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:01.152000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:30:01.154000 audit[1684]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1684 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:01.154000 audit[1684]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffdbaf21c0 a2=0 a3=1 items=0 ppid=1667 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:01.154000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:30:01.157000 audit[1686]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1686 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:01.157000 audit[1686]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffedb41da0 a2=0 a3=1 items=0 ppid=1667 pid=1686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:01.157000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:30:01.166168 kubelet[1667]: I1002 19:30:01.166146 1667 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:30:01.166290 kubelet[1667]: I1002 19:30:01.166278 1667 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:30:01.166347 kubelet[1667]: I1002 19:30:01.166339 1667 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:30:01.165000 audit[1692]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1692 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:01.165000 audit[1692]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffe4398190 a2=0 a3=1 items=0 ppid=1667 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:01.165000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:30:01.167075 kubelet[1667]: I1002 19:30:01.166820 1667 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:30:01.166000 audit[1693]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1693 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:01.166000 audit[1693]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffff273980 a2=0 a3=1 items=0 ppid=1667 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:01.166000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:30:01.168156 kubelet[1667]: I1002 19:30:01.168137 1667 policy_none.go:49] "None policy: Start" Oct 2 19:30:01.167000 audit[1694]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1694 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:01.167000 audit[1694]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffec9966e0 a2=0 a3=1 items=0 ppid=1667 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:01.167000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:30:01.168439 kubelet[1667]: I1002 19:30:01.168314 1667 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:30:01.168439 kubelet[1667]: I1002 19:30:01.168382 1667 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:30:01.168439 kubelet[1667]: I1002 19:30:01.168403 1667 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:30:01.168514 kubelet[1667]: E1002 19:30:01.168468 1667 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:30:01.168876 kubelet[1667]: I1002 19:30:01.168857 1667 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:30:01.168935 kubelet[1667]: I1002 19:30:01.168882 1667 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:30:01.169097 kubelet[1667]: W1002 19:30:01.169055 1667 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.8:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:30:01.169160 kubelet[1667]: E1002 19:30:01.169108 1667 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.8:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:30:01.169000 audit[1695]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1695 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:01.169000 audit[1695]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd1d433b0 a2=0 a3=1 items=0 ppid=1667 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:01.169000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:30:01.169000 audit[1696]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1696 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:01.169000 audit[1696]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd221db70 a2=0 a3=1 items=0 ppid=1667 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:01.169000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:30:01.170000 audit[1697]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=1697 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:01.170000 audit[1697]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=fffffe4bda70 a2=0 a3=1 items=0 ppid=1667 pid=1697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:01.170000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:30:01.171000 audit[1699]: NETFILTER_CFG table=filter:36 family=10 entries=2 op=nft_register_chain pid=1699 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:01.171000 audit[1699]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffeedd7cc0 a2=0 a3=1 items=0 ppid=1667 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:01.171000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:30:01.171000 audit[1698]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=1698 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:01.171000 audit[1698]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff842bea0 a2=0 a3=1 items=0 ppid=1667 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:01.171000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:30:01.174160 systemd[1]: Created slice kubepods.slice. Oct 2 19:30:01.177971 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:30:01.180414 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:30:01.189754 kubelet[1667]: I1002 19:30:01.189724 1667 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:30:01.188000 audit[1667]: AVC avc: denied { mac_admin } for pid=1667 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:01.188000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:30:01.188000 audit[1667]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000be1a70 a1=4000fb90e0 a2=4000be1a40 a3=25 items=0 ppid=1 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:01.188000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:30:01.190162 kubelet[1667]: I1002 19:30:01.189816 1667 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:30:01.190378 kubelet[1667]: I1002 19:30:01.190347 1667 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:30:01.191142 kubelet[1667]: E1002 19:30:01.191106 1667 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Oct 2 19:30:01.247983 kubelet[1667]: I1002 19:30:01.247950 1667 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:30:01.248754 kubelet[1667]: E1002 19:30:01.248731 1667 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.8:6443/api/v1/nodes\": dial tcp 10.0.0.8:6443: connect: connection refused" node="localhost" Oct 2 19:30:01.268983 kubelet[1667]: I1002 19:30:01.268935 1667 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:30:01.270284 kubelet[1667]: I1002 19:30:01.270258 1667 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:30:01.271124 kubelet[1667]: I1002 19:30:01.271089 1667 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:30:01.281176 systemd[1]: Created slice kubepods-burstable-pod24fef87020af50fba838138f9686fc61.slice. Oct 2 19:30:01.293967 systemd[1]: Created slice kubepods-burstable-pod39a3ef06edd414b2fd42eef56b8227a0.slice. Oct 2 19:30:01.303158 systemd[1]: Created slice kubepods-burstable-pod80b8b8966aa7d1c422f3be2bfac9c13f.slice. Oct 2 19:30:01.346166 kubelet[1667]: E1002 19:30:01.345998 1667 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a612054640b18", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 30, 1, 141103384, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 30, 1, 141103384, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.0.0.8:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.8:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:30:01.348003 kubelet[1667]: I1002 19:30:01.347971 1667 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/24fef87020af50fba838138f9686fc61-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"24fef87020af50fba838138f9686fc61\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:30:01.348085 kubelet[1667]: I1002 19:30:01.348062 1667 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/39a3ef06edd414b2fd42eef56b8227a0-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"39a3ef06edd414b2fd42eef56b8227a0\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:30:01.348182 kubelet[1667]: I1002 19:30:01.348153 1667 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:30:01.348235 kubelet[1667]: I1002 19:30:01.348216 1667 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:30:01.348264 kubelet[1667]: I1002 19:30:01.348241 1667 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/39a3ef06edd414b2fd42eef56b8227a0-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"39a3ef06edd414b2fd42eef56b8227a0\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:30:01.348321 kubelet[1667]: I1002 19:30:01.348260 1667 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/39a3ef06edd414b2fd42eef56b8227a0-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"39a3ef06edd414b2fd42eef56b8227a0\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:30:01.348356 kubelet[1667]: I1002 19:30:01.348332 1667 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:30:01.348413 kubelet[1667]: I1002 19:30:01.348378 1667 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:30:01.348474 kubelet[1667]: I1002 19:30:01.348460 1667 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:30:01.349644 kubelet[1667]: E1002 19:30:01.349610 1667 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.8:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.8:6443: connect: connection refused" interval="400ms" Oct 2 19:30:01.453645 kubelet[1667]: I1002 19:30:01.450272 1667 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:30:01.454291 kubelet[1667]: E1002 19:30:01.454269 1667 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.8:6443/api/v1/nodes\": dial tcp 10.0.0.8:6443: connect: connection refused" node="localhost" Oct 2 19:30:01.592370 kubelet[1667]: E1002 19:30:01.592338 1667 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:01.593256 env[1141]: time="2023-10-02T19:30:01.593220064Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:24fef87020af50fba838138f9686fc61,Namespace:kube-system,Attempt:0,}" Oct 2 19:30:01.602269 kubelet[1667]: E1002 19:30:01.602234 1667 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:01.602752 env[1141]: time="2023-10-02T19:30:01.602714944Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:39a3ef06edd414b2fd42eef56b8227a0,Namespace:kube-system,Attempt:0,}" Oct 2 19:30:01.605285 kubelet[1667]: E1002 19:30:01.605265 1667 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:01.606554 env[1141]: time="2023-10-02T19:30:01.606519144Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:80b8b8966aa7d1c422f3be2bfac9c13f,Namespace:kube-system,Attempt:0,}" Oct 2 19:30:01.750725 kubelet[1667]: E1002 19:30:01.750178 1667 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.8:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.8:6443: connect: connection refused" interval="800ms" Oct 2 19:30:01.856164 kubelet[1667]: I1002 19:30:01.855902 1667 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:30:01.856300 kubelet[1667]: E1002 19:30:01.856235 1667 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.8:6443/api/v1/nodes\": dial tcp 10.0.0.8:6443: connect: connection refused" node="localhost" Oct 2 19:30:02.163847 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount222378255.mount: Deactivated successfully. Oct 2 19:30:02.168141 env[1141]: time="2023-10-02T19:30:02.167850664Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:30:02.169053 env[1141]: time="2023-10-02T19:30:02.169026024Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:30:02.171077 env[1141]: time="2023-10-02T19:30:02.171041184Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:30:02.172830 env[1141]: time="2023-10-02T19:30:02.172798624Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:30:02.174344 env[1141]: time="2023-10-02T19:30:02.174316584Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:30:02.177366 env[1141]: time="2023-10-02T19:30:02.177334944Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:30:02.181065 env[1141]: time="2023-10-02T19:30:02.181035544Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:30:02.181878 env[1141]: time="2023-10-02T19:30:02.181843304Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:30:02.183500 env[1141]: time="2023-10-02T19:30:02.183472704Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:30:02.184432 env[1141]: time="2023-10-02T19:30:02.184405304Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:30:02.185297 env[1141]: time="2023-10-02T19:30:02.185270824Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:30:02.186270 env[1141]: time="2023-10-02T19:30:02.186240304Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:30:02.217786 env[1141]: time="2023-10-02T19:30:02.217699464Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:30:02.217786 env[1141]: time="2023-10-02T19:30:02.217741104Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:30:02.217786 env[1141]: time="2023-10-02T19:30:02.217752064Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:30:02.218026 env[1141]: time="2023-10-02T19:30:02.217992424Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fdfb3c1223a612e2844aafd1f7d295753dd5aea61f2389bb38e19d321cf41df0 pid=1722 runtime=io.containerd.runc.v2 Oct 2 19:30:02.218887 env[1141]: time="2023-10-02T19:30:02.218828704Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:30:02.219029 env[1141]: time="2023-10-02T19:30:02.219003144Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:30:02.219161 env[1141]: time="2023-10-02T19:30:02.219135864Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:30:02.219457 env[1141]: time="2023-10-02T19:30:02.219415864Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/35f197eb1d82c34bdeec2a57c2bd5704e8666c5cb310da2cd1c73f9b155c73b0 pid=1724 runtime=io.containerd.runc.v2 Oct 2 19:30:02.220775 env[1141]: time="2023-10-02T19:30:02.220710704Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:30:02.220775 env[1141]: time="2023-10-02T19:30:02.220742824Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:30:02.220775 env[1141]: time="2023-10-02T19:30:02.220753064Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:30:02.221831 env[1141]: time="2023-10-02T19:30:02.221561344Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2734e8237fc6cd98d9c1026c03bfbe32b9e7f9afa210dcd09185982b8958d3e1 pid=1723 runtime=io.containerd.runc.v2 Oct 2 19:30:02.233675 systemd[1]: Started cri-containerd-fdfb3c1223a612e2844aafd1f7d295753dd5aea61f2389bb38e19d321cf41df0.scope. Oct 2 19:30:02.236479 systemd[1]: Started cri-containerd-35f197eb1d82c34bdeec2a57c2bd5704e8666c5cb310da2cd1c73f9b155c73b0.scope. Oct 2 19:30:02.244521 systemd[1]: Started cri-containerd-2734e8237fc6cd98d9c1026c03bfbe32b9e7f9afa210dcd09185982b8958d3e1.scope. Oct 2 19:30:02.253510 kubelet[1667]: W1002 19:30:02.253418 1667 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.8:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:30:02.253510 kubelet[1667]: E1002 19:30:02.253485 1667 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.8:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:30:02.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit: BPF prog-id=61 op=LOAD Oct 2 19:30:02.280000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1751]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1724 pid=1751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335663139376562316438326333346264656563326135376332626435 Oct 2 19:30:02.280000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1751]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1724 pid=1751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335663139376562316438326333346264656563326135376332626435 Oct 2 19:30:02.280000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit: BPF prog-id=62 op=LOAD Oct 2 19:30:02.280000 audit[1751]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1724 pid=1751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335663139376562316438326333346264656563326135376332626435 Oct 2 19:30:02.280000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.280000 audit: BPF prog-id=63 op=LOAD Oct 2 19:30:02.280000 audit[1751]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1724 pid=1751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335663139376562316438326333346264656563326135376332626435 Oct 2 19:30:02.280000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:30:02.281000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:30:02.281000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.281000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.281000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.281000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.281000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.281000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.281000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.281000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.281000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.281000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.281000 audit: BPF prog-id=64 op=LOAD Oct 2 19:30:02.281000 audit[1751]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1724 pid=1751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335663139376562316438326333346264656563326135376332626435 Oct 2 19:30:02.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.283000 audit: BPF prog-id=65 op=LOAD Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=1722 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.284000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664666233633132323361363132653238343461616664316637643239 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=1722 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.284000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664666233633132323361363132653238343461616664316637643239 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit: BPF prog-id=66 op=LOAD Oct 2 19:30:02.284000 audit[1747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=1722 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.284000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664666233633132323361363132653238343461616664316637643239 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit: BPF prog-id=67 op=LOAD Oct 2 19:30:02.284000 audit[1747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=1722 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.284000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664666233633132323361363132653238343461616664316637643239 Oct 2 19:30:02.284000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:30:02.284000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit: BPF prog-id=68 op=LOAD Oct 2 19:30:02.284000 audit[1747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=1722 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.284000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664666233633132323361363132653238343461616664316637643239 Oct 2 19:30:02.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.284000 audit: BPF prog-id=69 op=LOAD Oct 2 19:30:02.286000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.286000 audit[1762]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1723 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237333465383233376663366364393864396331303236633033626662 Oct 2 19:30:02.286000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.286000 audit[1762]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1723 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237333465383233376663366364393864396331303236633033626662 Oct 2 19:30:02.287000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.287000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.287000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.287000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.287000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.287000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.287000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.287000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.287000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.287000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.287000 audit: BPF prog-id=70 op=LOAD Oct 2 19:30:02.287000 audit[1762]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1723 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237333465383233376663366364393864396331303236633033626662 Oct 2 19:30:02.287000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.287000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.287000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.287000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.287000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.287000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.287000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.287000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.287000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.287000 audit: BPF prog-id=71 op=LOAD Oct 2 19:30:02.287000 audit[1762]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1723 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237333465383233376663366364393864396331303236633033626662 Oct 2 19:30:02.288000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:30:02.288000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:30:02.288000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.288000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.288000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.288000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.288000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.288000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.288000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.288000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.288000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.288000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.288000 audit: BPF prog-id=72 op=LOAD Oct 2 19:30:02.288000 audit[1762]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1723 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237333465383233376663366364393864396331303236633033626662 Oct 2 19:30:02.314287 env[1141]: time="2023-10-02T19:30:02.314241704Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:24fef87020af50fba838138f9686fc61,Namespace:kube-system,Attempt:0,} returns sandbox id \"fdfb3c1223a612e2844aafd1f7d295753dd5aea61f2389bb38e19d321cf41df0\"" Oct 2 19:30:02.314629 env[1141]: time="2023-10-02T19:30:02.314596344Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:80b8b8966aa7d1c422f3be2bfac9c13f,Namespace:kube-system,Attempt:0,} returns sandbox id \"2734e8237fc6cd98d9c1026c03bfbe32b9e7f9afa210dcd09185982b8958d3e1\"" Oct 2 19:30:02.315902 env[1141]: time="2023-10-02T19:30:02.315841824Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:39a3ef06edd414b2fd42eef56b8227a0,Namespace:kube-system,Attempt:0,} returns sandbox id \"35f197eb1d82c34bdeec2a57c2bd5704e8666c5cb310da2cd1c73f9b155c73b0\"" Oct 2 19:30:02.316808 kubelet[1667]: E1002 19:30:02.316633 1667 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:02.316808 kubelet[1667]: E1002 19:30:02.316708 1667 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:02.316808 kubelet[1667]: E1002 19:30:02.316743 1667 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:02.319282 env[1141]: time="2023-10-02T19:30:02.319248864Z" level=info msg="CreateContainer within sandbox \"fdfb3c1223a612e2844aafd1f7d295753dd5aea61f2389bb38e19d321cf41df0\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:30:02.320342 env[1141]: time="2023-10-02T19:30:02.320312624Z" level=info msg="CreateContainer within sandbox \"2734e8237fc6cd98d9c1026c03bfbe32b9e7f9afa210dcd09185982b8958d3e1\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:30:02.320572 env[1141]: time="2023-10-02T19:30:02.320542664Z" level=info msg="CreateContainer within sandbox \"35f197eb1d82c34bdeec2a57c2bd5704e8666c5cb310da2cd1c73f9b155c73b0\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:30:02.335119 env[1141]: time="2023-10-02T19:30:02.335031224Z" level=info msg="CreateContainer within sandbox \"fdfb3c1223a612e2844aafd1f7d295753dd5aea61f2389bb38e19d321cf41df0\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"e3386ad59ea6f4ec3502ba56dc4452ea9536d55bf7fa83b22bba6d0776356028\"" Oct 2 19:30:02.335841 env[1141]: time="2023-10-02T19:30:02.335814384Z" level=info msg="StartContainer for \"e3386ad59ea6f4ec3502ba56dc4452ea9536d55bf7fa83b22bba6d0776356028\"" Oct 2 19:30:02.342822 env[1141]: time="2023-10-02T19:30:02.342778064Z" level=info msg="CreateContainer within sandbox \"35f197eb1d82c34bdeec2a57c2bd5704e8666c5cb310da2cd1c73f9b155c73b0\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"75efd6886d94fac014549e54d6eebf37c6a6918502c0e3de4a83f710303b91c0\"" Oct 2 19:30:02.343356 env[1141]: time="2023-10-02T19:30:02.343329584Z" level=info msg="StartContainer for \"75efd6886d94fac014549e54d6eebf37c6a6918502c0e3de4a83f710303b91c0\"" Oct 2 19:30:02.344404 env[1141]: time="2023-10-02T19:30:02.344358544Z" level=info msg="CreateContainer within sandbox \"2734e8237fc6cd98d9c1026c03bfbe32b9e7f9afa210dcd09185982b8958d3e1\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"1c60e9a8129eca946f93b643138e28e97f3acb21cf3239150e8191ce3ba05587\"" Oct 2 19:30:02.344717 env[1141]: time="2023-10-02T19:30:02.344689184Z" level=info msg="StartContainer for \"1c60e9a8129eca946f93b643138e28e97f3acb21cf3239150e8191ce3ba05587\"" Oct 2 19:30:02.353713 systemd[1]: Started cri-containerd-e3386ad59ea6f4ec3502ba56dc4452ea9536d55bf7fa83b22bba6d0776356028.scope. Oct 2 19:30:02.373025 systemd[1]: Started cri-containerd-75efd6886d94fac014549e54d6eebf37c6a6918502c0e3de4a83f710303b91c0.scope. Oct 2 19:30:02.378955 systemd[1]: Started cri-containerd-1c60e9a8129eca946f93b643138e28e97f3acb21cf3239150e8191ce3ba05587.scope. Oct 2 19:30:02.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.401000 audit: BPF prog-id=73 op=LOAD Oct 2 19:30:02.401000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.401000 audit[1837]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1722 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533333836616435396561366634656333353032626135366463343435 Oct 2 19:30:02.401000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.401000 audit[1837]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1722 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533333836616435396561366634656333353032626135366463343435 Oct 2 19:30:02.401000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.401000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.401000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.401000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.401000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.401000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.401000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.401000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.401000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.401000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.401000 audit: BPF prog-id=74 op=LOAD Oct 2 19:30:02.401000 audit[1837]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1722 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533333836616435396561366634656333353032626135366463343435 Oct 2 19:30:02.401000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.401000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.401000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.401000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.401000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.401000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.401000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.401000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.401000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.401000 audit: BPF prog-id=75 op=LOAD Oct 2 19:30:02.401000 audit[1837]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1722 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533333836616435396561366634656333353032626135366463343435 Oct 2 19:30:02.404000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:30:02.404000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:30:02.404000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.404000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.404000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.404000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.404000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.404000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.404000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.404000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.404000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.404000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.404000 audit: BPF prog-id=76 op=LOAD Oct 2 19:30:02.404000 audit[1837]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1722 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.404000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533333836616435396561366634656333353032626135366463343435 Oct 2 19:30:02.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.408000 audit: BPF prog-id=77 op=LOAD Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1724 pid=1861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735656664363838366439346661633031343534396535346436656562 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1724 pid=1861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735656664363838366439346661633031343534396535346436656562 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit: BPF prog-id=78 op=LOAD Oct 2 19:30:02.409000 audit[1861]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1724 pid=1861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735656664363838366439346661633031343534396535346436656562 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit: BPF prog-id=79 op=LOAD Oct 2 19:30:02.409000 audit[1861]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1724 pid=1861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735656664363838366439346661633031343534396535346436656562 Oct 2 19:30:02.409000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:30:02.409000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.409000 audit: BPF prog-id=80 op=LOAD Oct 2 19:30:02.409000 audit[1861]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1724 pid=1861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735656664363838366439346661633031343534396535346436656562 Oct 2 19:30:02.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.418000 audit: BPF prog-id=81 op=LOAD Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1723 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163363065396138313239656361393436663933623634333133386532 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1723 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163363065396138313239656361393436663933623634333133386532 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit: BPF prog-id=82 op=LOAD Oct 2 19:30:02.425000 audit[1860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1723 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163363065396138313239656361393436663933623634333133386532 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit: BPF prog-id=83 op=LOAD Oct 2 19:30:02.425000 audit[1860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1723 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163363065396138313239656361393436663933623634333133386532 Oct 2 19:30:02.425000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:30:02.425000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:02.425000 audit: BPF prog-id=84 op=LOAD Oct 2 19:30:02.425000 audit[1860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1723 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:02.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163363065396138313239656361393436663933623634333133386532 Oct 2 19:30:02.437806 kubelet[1667]: W1002 19:30:02.437722 1667 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.8:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:30:02.437806 kubelet[1667]: E1002 19:30:02.437780 1667 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.8:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:30:02.449932 env[1141]: time="2023-10-02T19:30:02.449882424Z" level=info msg="StartContainer for \"e3386ad59ea6f4ec3502ba56dc4452ea9536d55bf7fa83b22bba6d0776356028\" returns successfully" Oct 2 19:30:02.478715 kubelet[1667]: W1002 19:30:02.478584 1667 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.8:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:30:02.478715 kubelet[1667]: E1002 19:30:02.478662 1667 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.8:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 19:30:02.484285 env[1141]: time="2023-10-02T19:30:02.482784904Z" level=info msg="StartContainer for \"75efd6886d94fac014549e54d6eebf37c6a6918502c0e3de4a83f710303b91c0\" returns successfully" Oct 2 19:30:02.484393 env[1141]: time="2023-10-02T19:30:02.484293024Z" level=info msg="StartContainer for \"1c60e9a8129eca946f93b643138e28e97f3acb21cf3239150e8191ce3ba05587\" returns successfully" Oct 2 19:30:02.551008 kubelet[1667]: E1002 19:30:02.550962 1667 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.8:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.8:6443: connect: connection refused" interval="1.6s" Oct 2 19:30:02.657708 kubelet[1667]: I1002 19:30:02.657668 1667 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:30:03.176522 kubelet[1667]: E1002 19:30:03.176461 1667 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:03.176809 kubelet[1667]: E1002 19:30:03.176787 1667 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:03.178680 kubelet[1667]: E1002 19:30:03.178662 1667 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:03.761000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:03.761000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400046cde0 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:30:03.761000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:30:03.761000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:03.761000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400046a5c0 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:30:03.761000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:30:04.034000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:04.034000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3e a1=4003c98000 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:30:04.034000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:30:04.034000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:04.034000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3e a1=40065a6620 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:30:04.034000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:30:04.035000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:04.035000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3e a1=4003cca000 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:30:04.035000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:30:04.044000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6811 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:04.044000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=4003c98de0 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:30:04.044000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:30:04.053000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:04.053000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6b a1=4008ce1ea0 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:30:04.053000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:30:04.055000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:04.055000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6b a1=4003dc7860 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:30:04.055000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:30:04.156858 kubelet[1667]: I1002 19:30:04.156804 1667 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:30:04.176509 kubelet[1667]: E1002 19:30:04.176445 1667 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:30:04.181169 kubelet[1667]: E1002 19:30:04.181147 1667 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:04.277402 kubelet[1667]: E1002 19:30:04.277367 1667 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:30:04.377928 kubelet[1667]: E1002 19:30:04.377824 1667 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:30:04.478421 kubelet[1667]: E1002 19:30:04.478384 1667 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:30:04.579356 kubelet[1667]: E1002 19:30:04.579311 1667 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:30:04.680131 kubelet[1667]: E1002 19:30:04.680015 1667 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:30:05.140673 kubelet[1667]: I1002 19:30:05.140545 1667 apiserver.go:52] "Watching apiserver" Oct 2 19:30:05.147816 kubelet[1667]: I1002 19:30:05.147775 1667 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:30:05.178743 kubelet[1667]: I1002 19:30:05.178676 1667 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:30:06.727831 systemd[1]: Reloading. Oct 2 19:30:06.801085 /usr/lib/systemd/system-generators/torcx-generator[1966]: time="2023-10-02T19:30:06Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:30:06.802709 /usr/lib/systemd/system-generators/torcx-generator[1966]: time="2023-10-02T19:30:06Z" level=info msg="torcx already run" Oct 2 19:30:06.869976 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:30:06.869996 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:30:06.885935 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:30:06.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.948538 kernel: kauditd_printk_skb: 581 callbacks suppressed Oct 2 19:30:06.948627 kernel: audit: type=1400 audit(1696275006.944:681): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.948652 kernel: audit: type=1400 audit(1696275006.944:682): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.953312 kernel: audit: type=1400 audit(1696275006.944:683): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.953372 kernel: audit: type=1400 audit(1696275006.944:684): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.958182 kernel: audit: type=1400 audit(1696275006.944:685): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.961289 kernel: audit: type=1400 audit(1696275006.944:686): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.961352 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:30:06.961391 kernel: audit: type=1400 audit(1696275006.944:687): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.964408 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:30:06.964476 kernel: audit: type=1400 audit(1696275006.944:688): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.947000 audit: BPF prog-id=85 op=LOAD Oct 2 19:30:06.947000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:30:06.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.950000 audit: BPF prog-id=86 op=LOAD Oct 2 19:30:06.950000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:30:06.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.952000 audit: BPF prog-id=87 op=LOAD Oct 2 19:30:06.952000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:30:06.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.955000 audit: BPF prog-id=88 op=LOAD Oct 2 19:30:06.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.955000 audit: BPF prog-id=89 op=LOAD Oct 2 19:30:06.955000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:30:06.955000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:30:06.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.957000 audit: BPF prog-id=90 op=LOAD Oct 2 19:30:06.957000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:30:06.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.965000 audit: BPF prog-id=92 op=LOAD Oct 2 19:30:06.965000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:30:06.965000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:30:06.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.966000 audit: BPF prog-id=93 op=LOAD Oct 2 19:30:06.966000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:30:06.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.967000 audit: BPF prog-id=94 op=LOAD Oct 2 19:30:06.967000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:30:06.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.969000 audit: BPF prog-id=95 op=LOAD Oct 2 19:30:06.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.969000 audit: BPF prog-id=96 op=LOAD Oct 2 19:30:06.969000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:30:06.969000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:30:06.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.970000 audit: BPF prog-id=97 op=LOAD Oct 2 19:30:06.970000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:30:06.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.971000 audit: BPF prog-id=98 op=LOAD Oct 2 19:30:06.971000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:30:06.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.972000 audit: BPF prog-id=99 op=LOAD Oct 2 19:30:06.972000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:30:06.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.972000 audit: BPF prog-id=100 op=LOAD Oct 2 19:30:06.972000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit: BPF prog-id=101 op=LOAD Oct 2 19:30:06.973000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit: BPF prog-id=102 op=LOAD Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit: BPF prog-id=103 op=LOAD Oct 2 19:30:06.973000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:30:06.973000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.973000 audit: BPF prog-id=104 op=LOAD Oct 2 19:30:06.973000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:30:06.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:06.974000 audit: BPF prog-id=105 op=LOAD Oct 2 19:30:06.974000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:30:06.986298 kubelet[1667]: I1002 19:30:06.986204 1667 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:30:06.986296 systemd[1]: Stopping kubelet.service... Oct 2 19:30:07.006688 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:30:07.006905 systemd[1]: Stopped kubelet.service. Oct 2 19:30:07.005000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:07.006968 systemd[1]: kubelet.service: Consumed 1.256s CPU time. Oct 2 19:30:07.009504 systemd[1]: Started kubelet.service. Oct 2 19:30:07.008000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:07.076784 kubelet[2004]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:30:07.076784 kubelet[2004]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:30:07.076784 kubelet[2004]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:30:07.077161 kubelet[2004]: I1002 19:30:07.076864 2004 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:30:07.083039 kubelet[2004]: I1002 19:30:07.082992 2004 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:30:07.083039 kubelet[2004]: I1002 19:30:07.083021 2004 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:30:07.083290 kubelet[2004]: I1002 19:30:07.083275 2004 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:30:07.088476 kubelet[2004]: I1002 19:30:07.087258 2004 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:30:07.088720 kubelet[2004]: I1002 19:30:07.088699 2004 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:30:07.090691 kubelet[2004]: W1002 19:30:07.090664 2004 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:30:07.091495 kubelet[2004]: I1002 19:30:07.091472 2004 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:30:07.091713 kubelet[2004]: I1002 19:30:07.091694 2004 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:30:07.091780 kubelet[2004]: I1002 19:30:07.091771 2004 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:30:07.091862 kubelet[2004]: I1002 19:30:07.091806 2004 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:30:07.091862 kubelet[2004]: I1002 19:30:07.091822 2004 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:30:07.091862 kubelet[2004]: I1002 19:30:07.091846 2004 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:30:07.101536 kubelet[2004]: I1002 19:30:07.101509 2004 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:30:07.101661 kubelet[2004]: I1002 19:30:07.101549 2004 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:30:07.101661 kubelet[2004]: I1002 19:30:07.101606 2004 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:30:07.101661 kubelet[2004]: I1002 19:30:07.101623 2004 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:30:07.103385 kubelet[2004]: I1002 19:30:07.103358 2004 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:30:07.103944 kubelet[2004]: I1002 19:30:07.103918 2004 server.go:1168] "Started kubelet" Oct 2 19:30:07.106701 kubelet[2004]: I1002 19:30:07.106675 2004 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:30:07.106824 kubelet[2004]: I1002 19:30:07.106717 2004 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:30:07.106824 kubelet[2004]: I1002 19:30:07.106808 2004 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:30:07.108921 kubelet[2004]: E1002 19:30:07.108889 2004 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:30:07.109056 kubelet[2004]: E1002 19:30:07.109044 2004 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:30:07.105000 audit[2004]: AVC avc: denied { mac_admin } for pid=2004 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:07.105000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:30:07.105000 audit[2004]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d4d320 a1=4000c20fd8 a2=4000d4d2f0 a3=25 items=0 ppid=1 pid=2004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:07.105000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:30:07.105000 audit[2004]: AVC avc: denied { mac_admin } for pid=2004 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:07.105000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:30:07.105000 audit[2004]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d3a6e0 a1=4000c20ff0 a2=4000d4d3b0 a3=25 items=0 ppid=1 pid=2004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:07.105000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:30:07.116038 kubelet[2004]: I1002 19:30:07.116011 2004 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:30:07.116810 kubelet[2004]: I1002 19:30:07.116789 2004 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:30:07.117000 audit[2019]: USER_ACCT pid=2019 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:30:07.118516 sudo[2019]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:30:07.117000 audit[2019]: CRED_REFR pid=2019 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:30:07.118738 sudo[2019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:30:07.118923 kubelet[2004]: I1002 19:30:07.118901 2004 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:30:07.119000 audit[2019]: USER_START pid=2019 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:30:07.121046 kubelet[2004]: I1002 19:30:07.121020 2004 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:30:07.141241 kubelet[2004]: I1002 19:30:07.140974 2004 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:30:07.145266 kubelet[2004]: I1002 19:30:07.145242 2004 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:30:07.146734 kubelet[2004]: I1002 19:30:07.146716 2004 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:30:07.146865 kubelet[2004]: I1002 19:30:07.146852 2004 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:30:07.146930 kubelet[2004]: I1002 19:30:07.146921 2004 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:30:07.147026 kubelet[2004]: E1002 19:30:07.147017 2004 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:30:07.187773 kubelet[2004]: I1002 19:30:07.187745 2004 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:30:07.187773 kubelet[2004]: I1002 19:30:07.187768 2004 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:30:07.187773 kubelet[2004]: I1002 19:30:07.187785 2004 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:30:07.187951 kubelet[2004]: I1002 19:30:07.187922 2004 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:30:07.187951 kubelet[2004]: I1002 19:30:07.187934 2004 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:30:07.187951 kubelet[2004]: I1002 19:30:07.187940 2004 policy_none.go:49] "None policy: Start" Oct 2 19:30:07.190134 kubelet[2004]: I1002 19:30:07.190104 2004 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:30:07.191258 kubelet[2004]: I1002 19:30:07.191244 2004 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:30:07.191500 kubelet[2004]: I1002 19:30:07.191486 2004 state_mem.go:75] "Updated machine memory state" Oct 2 19:30:07.195054 kubelet[2004]: I1002 19:30:07.195037 2004 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:30:07.194000 audit[2004]: AVC avc: denied { mac_admin } for pid=2004 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:07.194000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:30:07.194000 audit[2004]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40013d1770 a1=400142ad08 a2=40013d1740 a3=25 items=0 ppid=1 pid=2004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:07.194000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:30:07.195420 kubelet[2004]: I1002 19:30:07.195405 2004 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:30:07.195675 kubelet[2004]: I1002 19:30:07.195658 2004 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:30:07.224126 kubelet[2004]: I1002 19:30:07.224086 2004 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:30:07.231599 kubelet[2004]: I1002 19:30:07.231565 2004 kubelet_node_status.go:108] "Node was previously registered" node="localhost" Oct 2 19:30:07.231796 kubelet[2004]: I1002 19:30:07.231784 2004 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:30:07.247990 kubelet[2004]: I1002 19:30:07.247900 2004 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:30:07.248225 kubelet[2004]: I1002 19:30:07.248200 2004 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:30:07.248579 kubelet[2004]: I1002 19:30:07.248498 2004 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:30:07.423285 kubelet[2004]: I1002 19:30:07.423250 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/39a3ef06edd414b2fd42eef56b8227a0-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"39a3ef06edd414b2fd42eef56b8227a0\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:30:07.423496 kubelet[2004]: I1002 19:30:07.423479 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:30:07.423602 kubelet[2004]: I1002 19:30:07.423582 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:30:07.423721 kubelet[2004]: I1002 19:30:07.423709 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:30:07.423819 kubelet[2004]: I1002 19:30:07.423809 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/24fef87020af50fba838138f9686fc61-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"24fef87020af50fba838138f9686fc61\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:30:07.423907 kubelet[2004]: I1002 19:30:07.423898 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/39a3ef06edd414b2fd42eef56b8227a0-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"39a3ef06edd414b2fd42eef56b8227a0\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:30:07.423993 kubelet[2004]: I1002 19:30:07.423984 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/39a3ef06edd414b2fd42eef56b8227a0-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"39a3ef06edd414b2fd42eef56b8227a0\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:30:07.424087 kubelet[2004]: I1002 19:30:07.424077 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:30:07.424215 kubelet[2004]: I1002 19:30:07.424204 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:30:07.557772 kubelet[2004]: E1002 19:30:07.557666 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:07.558475 kubelet[2004]: E1002 19:30:07.558443 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:07.558703 kubelet[2004]: E1002 19:30:07.558684 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:07.583944 sudo[2019]: pam_unix(sudo:session): session closed for user root Oct 2 19:30:07.582000 audit[2019]: USER_END pid=2019 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:30:07.582000 audit[2019]: CRED_DISP pid=2019 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:30:08.103164 kubelet[2004]: I1002 19:30:08.103130 2004 apiserver.go:52] "Watching apiserver" Oct 2 19:30:08.121807 kubelet[2004]: I1002 19:30:08.121768 2004 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:30:08.129965 kubelet[2004]: I1002 19:30:08.129933 2004 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:30:08.164200 kubelet[2004]: E1002 19:30:08.164177 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:08.181434 kubelet[2004]: E1002 19:30:08.181400 2004 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 2 19:30:08.182045 kubelet[2004]: E1002 19:30:08.182027 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:08.182276 kubelet[2004]: E1002 19:30:08.182248 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:08.188095 kubelet[2004]: I1002 19:30:08.188064 2004 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.188025967 podCreationTimestamp="2023-10-02 19:30:07 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:30:08.187753486 +0000 UTC m=+1.171945903" watchObservedRunningTime="2023-10-02 19:30:08.188025967 +0000 UTC m=+1.172218384" Oct 2 19:30:08.196226 kubelet[2004]: I1002 19:30:08.196196 2004 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.19615869 podCreationTimestamp="2023-10-02 19:30:07 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:30:08.195582087 +0000 UTC m=+1.179774504" watchObservedRunningTime="2023-10-02 19:30:08.19615869 +0000 UTC m=+1.180351107" Oct 2 19:30:08.202157 kubelet[2004]: I1002 19:30:08.202129 2004 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.202087241 podCreationTimestamp="2023-10-02 19:30:07 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:30:08.201676519 +0000 UTC m=+1.185868936" watchObservedRunningTime="2023-10-02 19:30:08.202087241 +0000 UTC m=+1.186279658" Oct 2 19:30:09.166124 kubelet[2004]: E1002 19:30:09.166082 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:09.629630 sudo[1267]: pam_unix(sudo:session): session closed for user root Oct 2 19:30:09.628000 audit[1267]: USER_END pid=1267 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:30:09.629000 audit[1267]: CRED_DISP pid=1267 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:30:09.631945 sshd[1264]: pam_unix(sshd:session): session closed for user core Oct 2 19:30:09.631000 audit[1264]: USER_END pid=1264 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:30:09.631000 audit[1264]: CRED_DISP pid=1264 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:30:09.634638 systemd-logind[1131]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:30:09.635783 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:30:09.635991 systemd[1]: session-7.scope: Consumed 7.195s CPU time. Oct 2 19:30:09.636499 systemd[1]: sshd@6-10.0.0.8:22-10.0.0.1:57974.service: Deactivated successfully. Oct 2 19:30:09.635000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.8:22-10.0.0.1:57974 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:09.637545 systemd-logind[1131]: Removed session 7. Oct 2 19:30:09.802671 kubelet[2004]: E1002 19:30:09.802631 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:10.167740 kubelet[2004]: E1002 19:30:10.167707 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:11.728845 kubelet[2004]: E1002 19:30:11.728814 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:13.224676 kubelet[2004]: E1002 19:30:13.224633 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:14.173018 kubelet[2004]: E1002 19:30:14.172982 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:19.217000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:19.221695 kernel: kauditd_printk_skb: 288 callbacks suppressed Oct 2 19:30:19.221812 kernel: audit: type=1400 audit(1696275019.217:925): avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:19.221856 kernel: audit: type=1300 audit(1696275019.217:925): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000e04040 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:30:19.217000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000e04040 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:30:19.217000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:30:19.231246 kernel: audit: type=1327 audit(1696275019.217:925): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:30:19.231366 kernel: audit: type=1400 audit(1696275019.217:926): avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:19.217000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:19.234633 kernel: audit: type=1300 audit(1696275019.217:926): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001244120 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:30:19.217000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001244120 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:30:19.217000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:30:19.242213 kernel: audit: type=1327 audit(1696275019.217:926): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:30:19.242351 kernel: audit: type=1400 audit(1696275019.217:927): avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:19.217000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:19.217000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001244260 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:30:19.249269 kernel: audit: type=1300 audit(1696275019.217:927): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001244260 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:30:19.249918 kernel: audit: type=1327 audit(1696275019.217:927): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:30:19.217000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:30:19.217000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:19.256034 kernel: audit: type=1400 audit(1696275019.217:928): avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:19.217000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000daf780 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:30:19.217000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:30:19.246000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32572 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:30:19.246000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400053a540 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:30:19.246000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:30:19.810788 kubelet[2004]: E1002 19:30:19.810757 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:20.385739 update_engine[1132]: I1002 19:30:20.385358 1132 update_attempter.cc:505] Updating boot flags... Oct 2 19:30:21.358397 kubelet[2004]: I1002 19:30:21.358347 2004 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:30:21.358826 env[1141]: time="2023-10-02T19:30:21.358786889Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:30:21.359026 kubelet[2004]: I1002 19:30:21.358984 2004 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:30:21.743482 kubelet[2004]: E1002 19:30:21.742856 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:22.161075 kubelet[2004]: I1002 19:30:22.158810 2004 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:30:22.165337 systemd[1]: Created slice kubepods-besteffort-pod6e434092_45f1_460b_9434_6462d4ea2a65.slice. Oct 2 19:30:22.169724 kubelet[2004]: I1002 19:30:22.169676 2004 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:30:22.178527 systemd[1]: Created slice kubepods-burstable-pod34b8cc7b_5768_41e5_9c5b_122435a1fb3e.slice. Oct 2 19:30:22.186733 kubelet[2004]: E1002 19:30:22.186689 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:22.291809 kubelet[2004]: I1002 19:30:22.291761 2004 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:30:22.296447 systemd[1]: Created slice kubepods-besteffort-pod2243cc77_d50f_4fe1_a3b5_1cd3221755f9.slice. Oct 2 19:30:22.321839 kubelet[2004]: I1002 19:30:22.321789 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-hubble-tls\") pod \"cilium-sj7vg\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " pod="kube-system/cilium-sj7vg" Oct 2 19:30:22.321995 kubelet[2004]: I1002 19:30:22.321852 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/6e434092-45f1-460b-9434-6462d4ea2a65-kube-proxy\") pod \"kube-proxy-jkchv\" (UID: \"6e434092-45f1-460b-9434-6462d4ea2a65\") " pod="kube-system/kube-proxy-jkchv" Oct 2 19:30:22.321995 kubelet[2004]: I1002 19:30:22.321877 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-etc-cni-netd\") pod \"cilium-sj7vg\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " pod="kube-system/cilium-sj7vg" Oct 2 19:30:22.321995 kubelet[2004]: I1002 19:30:22.321898 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-host-proc-sys-kernel\") pod \"cilium-sj7vg\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " pod="kube-system/cilium-sj7vg" Oct 2 19:30:22.321995 kubelet[2004]: I1002 19:30:22.321926 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-xtables-lock\") pod \"cilium-sj7vg\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " pod="kube-system/cilium-sj7vg" Oct 2 19:30:22.321995 kubelet[2004]: I1002 19:30:22.321946 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-clustermesh-secrets\") pod \"cilium-sj7vg\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " pod="kube-system/cilium-sj7vg" Oct 2 19:30:22.322138 kubelet[2004]: I1002 19:30:22.322036 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-hostproc\") pod \"cilium-sj7vg\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " pod="kube-system/cilium-sj7vg" Oct 2 19:30:22.322138 kubelet[2004]: I1002 19:30:22.322081 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ccrx5\" (UniqueName: \"kubernetes.io/projected/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-kube-api-access-ccrx5\") pod \"cilium-sj7vg\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " pod="kube-system/cilium-sj7vg" Oct 2 19:30:22.322195 kubelet[2004]: I1002 19:30:22.322144 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5j4tt\" (UniqueName: \"kubernetes.io/projected/6e434092-45f1-460b-9434-6462d4ea2a65-kube-api-access-5j4tt\") pod \"kube-proxy-jkchv\" (UID: \"6e434092-45f1-460b-9434-6462d4ea2a65\") " pod="kube-system/kube-proxy-jkchv" Oct 2 19:30:22.322195 kubelet[2004]: I1002 19:30:22.322170 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-bpf-maps\") pod \"cilium-sj7vg\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " pod="kube-system/cilium-sj7vg" Oct 2 19:30:22.322195 kubelet[2004]: I1002 19:30:22.322192 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/6e434092-45f1-460b-9434-6462d4ea2a65-xtables-lock\") pod \"kube-proxy-jkchv\" (UID: \"6e434092-45f1-460b-9434-6462d4ea2a65\") " pod="kube-system/kube-proxy-jkchv" Oct 2 19:30:22.322265 kubelet[2004]: I1002 19:30:22.322225 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-host-proc-sys-net\") pod \"cilium-sj7vg\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " pod="kube-system/cilium-sj7vg" Oct 2 19:30:22.322290 kubelet[2004]: I1002 19:30:22.322273 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-cilium-cgroup\") pod \"cilium-sj7vg\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " pod="kube-system/cilium-sj7vg" Oct 2 19:30:22.322317 kubelet[2004]: I1002 19:30:22.322300 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-lib-modules\") pod \"cilium-sj7vg\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " pod="kube-system/cilium-sj7vg" Oct 2 19:30:22.322344 kubelet[2004]: I1002 19:30:22.322322 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/6e434092-45f1-460b-9434-6462d4ea2a65-lib-modules\") pod \"kube-proxy-jkchv\" (UID: \"6e434092-45f1-460b-9434-6462d4ea2a65\") " pod="kube-system/kube-proxy-jkchv" Oct 2 19:30:22.322371 kubelet[2004]: I1002 19:30:22.322343 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-cilium-config-path\") pod \"cilium-sj7vg\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " pod="kube-system/cilium-sj7vg" Oct 2 19:30:22.322371 kubelet[2004]: I1002 19:30:22.322364 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-cilium-run\") pod \"cilium-sj7vg\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " pod="kube-system/cilium-sj7vg" Oct 2 19:30:22.322431 kubelet[2004]: I1002 19:30:22.322406 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-cni-path\") pod \"cilium-sj7vg\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " pod="kube-system/cilium-sj7vg" Oct 2 19:30:22.422882 kubelet[2004]: I1002 19:30:22.422756 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/2243cc77-d50f-4fe1-a3b5-1cd3221755f9-cilium-config-path\") pod \"cilium-operator-574c4bb98d-vlmfj\" (UID: \"2243cc77-d50f-4fe1-a3b5-1cd3221755f9\") " pod="kube-system/cilium-operator-574c4bb98d-vlmfj" Oct 2 19:30:22.422882 kubelet[2004]: I1002 19:30:22.422808 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vsv29\" (UniqueName: \"kubernetes.io/projected/2243cc77-d50f-4fe1-a3b5-1cd3221755f9-kube-api-access-vsv29\") pod \"cilium-operator-574c4bb98d-vlmfj\" (UID: \"2243cc77-d50f-4fe1-a3b5-1cd3221755f9\") " pod="kube-system/cilium-operator-574c4bb98d-vlmfj" Oct 2 19:30:22.475879 kubelet[2004]: E1002 19:30:22.475801 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:22.476878 env[1141]: time="2023-10-02T19:30:22.476841250Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-jkchv,Uid:6e434092-45f1-460b-9434-6462d4ea2a65,Namespace:kube-system,Attempt:0,}" Oct 2 19:30:22.482130 kubelet[2004]: E1002 19:30:22.482054 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:22.484746 env[1141]: time="2023-10-02T19:30:22.483381464Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-sj7vg,Uid:34b8cc7b-5768-41e5-9c5b-122435a1fb3e,Namespace:kube-system,Attempt:0,}" Oct 2 19:30:22.499509 env[1141]: time="2023-10-02T19:30:22.499429099Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:30:22.499509 env[1141]: time="2023-10-02T19:30:22.499471459Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:30:22.499509 env[1141]: time="2023-10-02T19:30:22.499482419Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:30:22.499959 env[1141]: time="2023-10-02T19:30:22.499886099Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e51bf2d357abb24bd66f61b45cd9dac6fda68e2a15a07d2e6b42d1bbd6b60c99 pid=2102 runtime=io.containerd.runc.v2 Oct 2 19:30:22.504140 env[1141]: time="2023-10-02T19:30:22.504039508Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:30:22.504140 env[1141]: time="2023-10-02T19:30:22.504080108Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:30:22.504140 env[1141]: time="2023-10-02T19:30:22.504122869Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:30:22.504326 env[1141]: time="2023-10-02T19:30:22.504293029Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a pid=2120 runtime=io.containerd.runc.v2 Oct 2 19:30:22.513129 systemd[1]: Started cri-containerd-e51bf2d357abb24bd66f61b45cd9dac6fda68e2a15a07d2e6b42d1bbd6b60c99.scope. Oct 2 19:30:22.519353 systemd[1]: Started cri-containerd-9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a.scope. Oct 2 19:30:22.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.549000 audit: BPF prog-id=106 op=LOAD Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { bpf } for pid=2122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2102 pid=2122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535316266326433353761626232346264363666363162343563643964 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { perfmon } for pid=2122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2102 pid=2122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535316266326433353761626232346264363666363162343563643964 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { bpf } for pid=2122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { bpf } for pid=2122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { bpf } for pid=2122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { perfmon } for pid=2122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { perfmon } for pid=2122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { perfmon } for pid=2122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { perfmon } for pid=2122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { perfmon } for pid=2122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { bpf } for pid=2122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { bpf } for pid=2122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit: BPF prog-id=107 op=LOAD Oct 2 19:30:22.550000 audit[2122]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2102 pid=2122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535316266326433353761626232346264363666363162343563643964 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { bpf } for pid=2122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { bpf } for pid=2122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { perfmon } for pid=2122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { perfmon } for pid=2122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { perfmon } for pid=2122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { perfmon } for pid=2122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { perfmon } for pid=2122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { bpf } for pid=2122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { bpf } for pid=2122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit: BPF prog-id=108 op=LOAD Oct 2 19:30:22.550000 audit[2122]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2102 pid=2122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535316266326433353761626232346264363666363162343563643964 Oct 2 19:30:22.550000 audit: BPF prog-id=108 op=UNLOAD Oct 2 19:30:22.550000 audit: BPF prog-id=107 op=UNLOAD Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { bpf } for pid=2122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { bpf } for pid=2122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { bpf } for pid=2122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { perfmon } for pid=2122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { perfmon } for pid=2122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { perfmon } for pid=2122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { perfmon } for pid=2122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { perfmon } for pid=2122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { bpf } for pid=2122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit[2122]: AVC avc: denied { bpf } for pid=2122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.550000 audit: BPF prog-id=109 op=LOAD Oct 2 19:30:22.550000 audit[2122]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2102 pid=2122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535316266326433353761626232346264363666363162343563643964 Oct 2 19:30:22.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.553000 audit: BPF prog-id=110 op=LOAD Oct 2 19:30:22.554000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.554000 audit[2136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2120 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.554000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939313831393062376263633537303365643163346465663339313533 Oct 2 19:30:22.554000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.554000 audit[2136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2120 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.554000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939313831393062376263633537303365643163346465663339313533 Oct 2 19:30:22.555000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.555000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.555000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.555000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.555000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.555000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.555000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.555000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.555000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.555000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.555000 audit: BPF prog-id=111 op=LOAD Oct 2 19:30:22.555000 audit[2136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2120 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.555000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939313831393062376263633537303365643163346465663339313533 Oct 2 19:30:22.556000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.556000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.556000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.556000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.556000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.556000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.556000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.556000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.556000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.556000 audit: BPF prog-id=112 op=LOAD Oct 2 19:30:22.556000 audit[2136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2120 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939313831393062376263633537303365643163346465663339313533 Oct 2 19:30:22.557000 audit: BPF prog-id=112 op=UNLOAD Oct 2 19:30:22.557000 audit: BPF prog-id=111 op=UNLOAD Oct 2 19:30:22.557000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.557000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.557000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.557000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.557000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.557000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.557000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.557000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.557000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.557000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.557000 audit: BPF prog-id=113 op=LOAD Oct 2 19:30:22.557000 audit[2136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2120 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.557000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939313831393062376263633537303365643163346465663339313533 Oct 2 19:30:22.568433 env[1141]: time="2023-10-02T19:30:22.568214566Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-jkchv,Uid:6e434092-45f1-460b-9434-6462d4ea2a65,Namespace:kube-system,Attempt:0,} returns sandbox id \"e51bf2d357abb24bd66f61b45cd9dac6fda68e2a15a07d2e6b42d1bbd6b60c99\"" Oct 2 19:30:22.568926 kubelet[2004]: E1002 19:30:22.568904 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:22.575281 env[1141]: time="2023-10-02T19:30:22.574305419Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-sj7vg,Uid:34b8cc7b-5768-41e5-9c5b-122435a1fb3e,Namespace:kube-system,Attempt:0,} returns sandbox id \"9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a\"" Oct 2 19:30:22.575387 kubelet[2004]: E1002 19:30:22.574854 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:22.575873 env[1141]: time="2023-10-02T19:30:22.575816582Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:30:22.577726 env[1141]: time="2023-10-02T19:30:22.577476465Z" level=info msg="CreateContainer within sandbox \"e51bf2d357abb24bd66f61b45cd9dac6fda68e2a15a07d2e6b42d1bbd6b60c99\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:30:22.593352 env[1141]: time="2023-10-02T19:30:22.593244539Z" level=info msg="CreateContainer within sandbox \"e51bf2d357abb24bd66f61b45cd9dac6fda68e2a15a07d2e6b42d1bbd6b60c99\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"f6451af9f60e873a921f3568cf1297c31f2a825d06bf061400d54d221bfabdc3\"" Oct 2 19:30:22.594152 env[1141]: time="2023-10-02T19:30:22.593972141Z" level=info msg="StartContainer for \"f6451af9f60e873a921f3568cf1297c31f2a825d06bf061400d54d221bfabdc3\"" Oct 2 19:30:22.599624 kubelet[2004]: E1002 19:30:22.599199 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:22.600096 env[1141]: time="2023-10-02T19:30:22.600049954Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-vlmfj,Uid:2243cc77-d50f-4fe1-a3b5-1cd3221755f9,Namespace:kube-system,Attempt:0,}" Oct 2 19:30:22.613523 systemd[1]: Started cri-containerd-f6451af9f60e873a921f3568cf1297c31f2a825d06bf061400d54d221bfabdc3.scope. Oct 2 19:30:22.620852 env[1141]: time="2023-10-02T19:30:22.620768758Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:30:22.620852 env[1141]: time="2023-10-02T19:30:22.620810158Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:30:22.620852 env[1141]: time="2023-10-02T19:30:22.620820838Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:30:22.621236 env[1141]: time="2023-10-02T19:30:22.621198199Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b57ea8fee9c8a2914d364bf228f561b6daae92e38e62877ccda29b565c292e15 pid=2202 runtime=io.containerd.runc.v2 Oct 2 19:30:22.633092 systemd[1]: Started cri-containerd-b57ea8fee9c8a2914d364bf228f561b6daae92e38e62877ccda29b565c292e15.scope. Oct 2 19:30:22.644000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.644000 audit[2186]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2102 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.644000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636343531616639663630653837336139323166333536386366313239 Oct 2 19:30:22.644000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.644000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.644000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.644000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.644000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.644000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.644000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.644000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.644000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.644000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.644000 audit: BPF prog-id=114 op=LOAD Oct 2 19:30:22.644000 audit[2186]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2102 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.644000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636343531616639663630653837336139323166333536386366313239 Oct 2 19:30:22.647000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.647000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.647000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.647000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.647000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.647000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.647000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.647000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.647000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.647000 audit: BPF prog-id=115 op=LOAD Oct 2 19:30:22.647000 audit[2186]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2102 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.647000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636343531616639663630653837336139323166333536386366313239 Oct 2 19:30:22.648000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:30:22.648000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:30:22.648000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.648000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.648000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.648000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.648000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.648000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.648000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.648000 audit[2186]: AVC avc: denied { perfmon } for pid=2186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.648000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.648000 audit[2186]: AVC avc: denied { bpf } for pid=2186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.648000 audit: BPF prog-id=116 op=LOAD Oct 2 19:30:22.648000 audit[2186]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2102 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.648000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636343531616639663630653837336139323166333536386366313239 Oct 2 19:30:22.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.655000 audit: BPF prog-id=117 op=LOAD Oct 2 19:30:22.655000 audit[2213]: AVC avc: denied { bpf } for pid=2213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.655000 audit[2213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2202 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235376561386665653963386132393134643336346266323238663536 Oct 2 19:30:22.655000 audit[2213]: AVC avc: denied { perfmon } for pid=2213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.655000 audit[2213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2202 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235376561386665653963386132393134643336346266323238663536 Oct 2 19:30:22.655000 audit[2213]: AVC avc: denied { bpf } for pid=2213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.655000 audit[2213]: AVC avc: denied { bpf } for pid=2213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.655000 audit[2213]: AVC avc: denied { bpf } for pid=2213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.655000 audit[2213]: AVC avc: denied { perfmon } for pid=2213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.655000 audit[2213]: AVC avc: denied { perfmon } for pid=2213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.655000 audit[2213]: AVC avc: denied { perfmon } for pid=2213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.655000 audit[2213]: AVC avc: denied { perfmon } for pid=2213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.655000 audit[2213]: AVC avc: denied { perfmon } for pid=2213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.655000 audit[2213]: AVC avc: denied { bpf } for pid=2213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.655000 audit[2213]: AVC avc: denied { bpf } for pid=2213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.655000 audit: BPF prog-id=118 op=LOAD Oct 2 19:30:22.655000 audit[2213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2202 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235376561386665653963386132393134643336346266323238663536 Oct 2 19:30:22.656000 audit[2213]: AVC avc: denied { bpf } for pid=2213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.656000 audit[2213]: AVC avc: denied { bpf } for pid=2213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.656000 audit[2213]: AVC avc: denied { perfmon } for pid=2213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.656000 audit[2213]: AVC avc: denied { perfmon } for pid=2213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.656000 audit[2213]: AVC avc: denied { perfmon } for pid=2213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.656000 audit[2213]: AVC avc: denied { perfmon } for pid=2213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.656000 audit[2213]: AVC avc: denied { perfmon } for pid=2213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.656000 audit[2213]: AVC avc: denied { bpf } for pid=2213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.656000 audit[2213]: AVC avc: denied { bpf } for pid=2213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.656000 audit: BPF prog-id=119 op=LOAD Oct 2 19:30:22.656000 audit[2213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2202 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235376561386665653963386132393134643336346266323238663536 Oct 2 19:30:22.656000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:30:22.656000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:30:22.656000 audit[2213]: AVC avc: denied { bpf } for pid=2213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.656000 audit[2213]: AVC avc: denied { bpf } for pid=2213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.656000 audit[2213]: AVC avc: denied { bpf } for pid=2213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.656000 audit[2213]: AVC avc: denied { perfmon } for pid=2213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.656000 audit[2213]: AVC avc: denied { perfmon } for pid=2213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.656000 audit[2213]: AVC avc: denied { perfmon } for pid=2213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.656000 audit[2213]: AVC avc: denied { perfmon } for pid=2213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.656000 audit[2213]: AVC avc: denied { perfmon } for pid=2213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.656000 audit[2213]: AVC avc: denied { bpf } for pid=2213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.656000 audit[2213]: AVC avc: denied { bpf } for pid=2213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:22.656000 audit: BPF prog-id=120 op=LOAD Oct 2 19:30:22.656000 audit[2213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2202 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235376561386665653963386132393134643336346266323238663536 Oct 2 19:30:22.672971 env[1141]: time="2023-10-02T19:30:22.672866029Z" level=info msg="StartContainer for \"f6451af9f60e873a921f3568cf1297c31f2a825d06bf061400d54d221bfabdc3\" returns successfully" Oct 2 19:30:22.686327 env[1141]: time="2023-10-02T19:30:22.684644574Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-vlmfj,Uid:2243cc77-d50f-4fe1-a3b5-1cd3221755f9,Namespace:kube-system,Attempt:0,} returns sandbox id \"b57ea8fee9c8a2914d364bf228f561b6daae92e38e62877ccda29b565c292e15\"" Oct 2 19:30:22.686572 kubelet[2004]: E1002 19:30:22.686545 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:22.806000 audit[2275]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2275 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:22.806000 audit[2275]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffccb49ec0 a2=0 a3=ffff872bb6c0 items=0 ppid=2211 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.806000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:30:22.806000 audit[2276]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2276 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:22.806000 audit[2276]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd3001be0 a2=0 a3=ffff844026c0 items=0 ppid=2211 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.806000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:30:22.808000 audit[2277]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2277 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:22.808000 audit[2277]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffee955030 a2=0 a3=ffffa23826c0 items=0 ppid=2211 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.808000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:30:22.811000 audit[2278]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=2278 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:22.811000 audit[2278]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc2cdb120 a2=0 a3=ffff9e6216c0 items=0 ppid=2211 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.811000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:30:22.811000 audit[2279]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=2279 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:22.811000 audit[2279]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc04cd340 a2=0 a3=ffffb01976c0 items=0 ppid=2211 pid=2279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.811000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:30:22.813000 audit[2280]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2280 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:22.813000 audit[2280]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe57ace20 a2=0 a3=ffff8654f6c0 items=0 ppid=2211 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.813000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:30:22.908000 audit[2281]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2281 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:22.908000 audit[2281]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffeb773fb0 a2=0 a3=ffffb12186c0 items=0 ppid=2211 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.908000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:30:22.910000 audit[2283]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2283 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:22.910000 audit[2283]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffdd4cb490 a2=0 a3=ffff88ff16c0 items=0 ppid=2211 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.910000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:30:22.916000 audit[2286]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2286 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:22.916000 audit[2286]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffcf729280 a2=0 a3=ffff832626c0 items=0 ppid=2211 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.916000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:30:22.918000 audit[2287]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2287 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:22.918000 audit[2287]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffffb8fcd0 a2=0 a3=ffff87c2c6c0 items=0 ppid=2211 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.918000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:30:22.921000 audit[2289]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2289 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:22.921000 audit[2289]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff96cc280 a2=0 a3=ffff7fb7a6c0 items=0 ppid=2211 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.921000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:30:22.922000 audit[2290]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2290 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:22.922000 audit[2290]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff20223c0 a2=0 a3=ffffaae1b6c0 items=0 ppid=2211 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.922000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:30:22.928000 audit[2292]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2292 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:22.928000 audit[2292]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffdb7c6d90 a2=0 a3=ffff9043a6c0 items=0 ppid=2211 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.928000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:30:22.936000 audit[2295]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2295 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:22.936000 audit[2295]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd8cb3b80 a2=0 a3=ffffb1d2e6c0 items=0 ppid=2211 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.936000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:30:22.938000 audit[2296]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2296 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:22.938000 audit[2296]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeeb4adc0 a2=0 a3=ffffb8a286c0 items=0 ppid=2211 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.938000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:30:22.941000 audit[2298]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2298 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:22.941000 audit[2298]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc0b77d50 a2=0 a3=ffff9f0fa6c0 items=0 ppid=2211 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.941000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:30:22.942000 audit[2299]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2299 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:22.942000 audit[2299]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcf9331f0 a2=0 a3=ffff8ce106c0 items=0 ppid=2211 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.942000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:30:22.945000 audit[2301]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2301 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:22.945000 audit[2301]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffffe019a0 a2=0 a3=ffff9f8416c0 items=0 ppid=2211 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.945000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:30:22.950000 audit[2304]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2304 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:22.950000 audit[2304]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe0373f60 a2=0 a3=ffff8c2b56c0 items=0 ppid=2211 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.950000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:30:22.957000 audit[2307]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2307 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:22.957000 audit[2307]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffa7157a0 a2=0 a3=ffffaa4496c0 items=0 ppid=2211 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.957000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:30:22.958000 audit[2308]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2308 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:22.958000 audit[2308]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd9006ab0 a2=0 a3=ffff85a1b6c0 items=0 ppid=2211 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.958000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:30:22.963000 audit[2310]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2310 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:22.963000 audit[2310]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=fffff5c66e40 a2=0 a3=ffffbce746c0 items=0 ppid=2211 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.963000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:30:22.969000 audit[2313]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2313 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:22.969000 audit[2313]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdc8ad2d0 a2=0 a3=ffffb16a26c0 items=0 ppid=2211 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.969000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:30:22.976000 audit[2318]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2318 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:22.976000 audit[2318]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffb55a8f0 a2=0 a3=ffff98b216c0 items=0 ppid=2211 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.976000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:30:22.979000 audit[2320]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2320 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:30:22.979000 audit[2320]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffc9170ee0 a2=0 a3=ffff9a1e16c0 items=0 ppid=2211 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.979000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:30:22.991000 audit[2322]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2322 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:30:22.991000 audit[2322]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffec4a6900 a2=0 a3=ffff853666c0 items=0 ppid=2211 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.991000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:30:22.997000 audit[2322]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2322 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:30:22.997000 audit[2322]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffec4a6900 a2=0 a3=ffff853666c0 items=0 ppid=2211 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:22.997000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:30:23.003000 audit[2326]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2326 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:23.003000 audit[2326]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff69cd000 a2=0 a3=ffff95db96c0 items=0 ppid=2211 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.003000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:30:23.005000 audit[2328]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2328 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:23.005000 audit[2328]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffee0a5840 a2=0 a3=ffffadfc16c0 items=0 ppid=2211 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.005000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:30:23.009000 audit[2331]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2331 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:23.009000 audit[2331]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff2ad7f40 a2=0 a3=ffffa489b6c0 items=0 ppid=2211 pid=2331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.009000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:30:23.010000 audit[2332]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2332 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:23.010000 audit[2332]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff6b28800 a2=0 a3=ffff85c5b6c0 items=0 ppid=2211 pid=2332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.010000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:30:23.012000 audit[2334]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2334 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:23.012000 audit[2334]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdeab5fe0 a2=0 a3=ffffa0f696c0 items=0 ppid=2211 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.012000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:30:23.014000 audit[2335]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2335 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:23.014000 audit[2335]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe16c7e20 a2=0 a3=ffff8005a6c0 items=0 ppid=2211 pid=2335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.014000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:30:23.016000 audit[2337]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2337 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:23.016000 audit[2337]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd71b8010 a2=0 a3=ffffb4f496c0 items=0 ppid=2211 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.016000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:30:23.020000 audit[2340]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2340 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:23.020000 audit[2340]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffff4d96430 a2=0 a3=ffff8df426c0 items=0 ppid=2211 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.020000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:30:23.022000 audit[2341]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2341 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:23.022000 audit[2341]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd5383e30 a2=0 a3=ffffab6ba6c0 items=0 ppid=2211 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.022000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:30:23.025000 audit[2343]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2343 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:23.025000 audit[2343]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd7e68ff0 a2=0 a3=ffff83c746c0 items=0 ppid=2211 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.025000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:30:23.027000 audit[2344]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2344 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:23.027000 audit[2344]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffed993d50 a2=0 a3=ffff97dd46c0 items=0 ppid=2211 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.027000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:30:23.030000 audit[2346]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2346 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:23.030000 audit[2346]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc5e34040 a2=0 a3=ffff907b96c0 items=0 ppid=2211 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.030000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:30:23.034000 audit[2349]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2349 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:23.034000 audit[2349]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe3788c00 a2=0 a3=ffffb84b56c0 items=0 ppid=2211 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.034000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:30:23.038000 audit[2352]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2352 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:23.038000 audit[2352]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffce040900 a2=0 a3=ffffbe6db6c0 items=0 ppid=2211 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.038000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:30:23.039000 audit[2353]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2353 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:23.039000 audit[2353]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffefa198b0 a2=0 a3=ffffbb9a06c0 items=0 ppid=2211 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.039000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:30:23.041000 audit[2355]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2355 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:23.041000 audit[2355]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffdc994a60 a2=0 a3=ffffaf21e6c0 items=0 ppid=2211 pid=2355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.041000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:30:23.045000 audit[2358]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2358 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:23.045000 audit[2358]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffcdd92cd0 a2=0 a3=ffffbcd0c6c0 items=0 ppid=2211 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.045000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:30:23.046000 audit[2359]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_chain pid=2359 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:23.046000 audit[2359]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc6d68b40 a2=0 a3=ffff910f16c0 items=0 ppid=2211 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.046000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:30:23.049000 audit[2361]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=2361 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:23.049000 audit[2361]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc90dd910 a2=0 a3=ffffafebc6c0 items=0 ppid=2211 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.049000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:30:23.053000 audit[2364]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_rule pid=2364 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:23.053000 audit[2364]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe8b664f0 a2=0 a3=ffffa3ebd6c0 items=0 ppid=2211 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.053000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:30:23.054000 audit[2365]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=2365 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:23.054000 audit[2365]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd9ade9c0 a2=0 a3=ffffa40b16c0 items=0 ppid=2211 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.054000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:30:23.057000 audit[2367]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=2367 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:30:23.057000 audit[2367]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffe5677460 a2=0 a3=ffff92d7e6c0 items=0 ppid=2211 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.057000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:30:23.060000 audit[2369]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2369 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:30:23.060000 audit[2369]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=fffff6097570 a2=0 a3=ffff9c47e6c0 items=0 ppid=2211 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.060000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:30:23.060000 audit[2369]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2369 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:30:23.060000 audit[2369]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=fffff6097570 a2=0 a3=ffff9c47e6c0 items=0 ppid=2211 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:23.060000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:30:23.189611 kubelet[2004]: E1002 19:30:23.189495 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:23.204472 kubelet[2004]: I1002 19:30:23.204436 2004 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-jkchv" podStartSLOduration=2.204403218 podCreationTimestamp="2023-10-02 19:30:21 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:30:23.204036457 +0000 UTC m=+16.188228874" watchObservedRunningTime="2023-10-02 19:30:23.204403218 +0000 UTC m=+16.188595635" Oct 2 19:30:26.176098 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount114847589.mount: Deactivated successfully. Oct 2 19:30:27.234419 kubelet[2004]: I1002 19:30:27.234381 2004 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:30:27.234419 kubelet[2004]: I1002 19:30:27.234424 2004 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:30:27.238444 kubelet[2004]: I1002 19:30:27.238413 2004 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:30:27.240085 kubelet[2004]: I1002 19:30:27.240056 2004 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e" size=253553 Oct 2 19:30:27.240444 env[1141]: time="2023-10-02T19:30:27.240348875Z" level=info msg="RemoveImage \"sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e\"" Oct 2 19:30:27.361723 env[1141]: time="2023-10-02T19:30:27.361673903Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause:3.6,XXX_unrecognized:[],}" Oct 2 19:30:27.388956 env[1141]: time="2023-10-02T19:30:27.388904785Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,XXX_unrecognized:[],}" Oct 2 19:30:27.391385 env[1141]: time="2023-10-02T19:30:27.391343709Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,XXX_unrecognized:[],}" Oct 2 19:30:27.394459 env[1141]: time="2023-10-02T19:30:27.394412673Z" level=info msg="RemoveImage \"sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e\" returns successfully" Oct 2 19:30:27.394817 kubelet[2004]: I1002 19:30:27.394798 2004 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737" size=80665728 Oct 2 19:30:27.395117 env[1141]: time="2023-10-02T19:30:27.395072154Z" level=info msg="RemoveImage \"sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737\"" Oct 2 19:30:27.398972 env[1141]: time="2023-10-02T19:30:27.398868520Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd:3.5.7-0,XXX_unrecognized:[],}" Oct 2 19:30:27.400474 env[1141]: time="2023-10-02T19:30:27.400442083Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,XXX_unrecognized:[],}" Oct 2 19:30:27.403085 env[1141]: time="2023-10-02T19:30:27.403047207Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737,XXX_unrecognized:[],}" Oct 2 19:30:27.494039 env[1141]: time="2023-10-02T19:30:27.493921147Z" level=info msg="RemoveImage \"sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737\" returns successfully" Oct 2 19:30:27.494562 kubelet[2004]: I1002 19:30:27.494520 2004 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108" size=14557471 Oct 2 19:30:27.494945 env[1141]: time="2023-10-02T19:30:27.494903069Z" level=info msg="RemoveImage \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Oct 2 19:30:27.499200 env[1141]: time="2023-10-02T19:30:27.499156195Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns:v1.10.1,XXX_unrecognized:[],}" Oct 2 19:30:27.529829 env[1141]: time="2023-10-02T19:30:27.529778283Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,XXX_unrecognized:[],}" Oct 2 19:30:27.864094 env[1141]: time="2023-10-02T19:30:27.864044760Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,XXX_unrecognized:[],}" Oct 2 19:30:27.878252 env[1141]: time="2023-10-02T19:30:27.878184342Z" level=info msg="RemoveImage \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\" returns successfully" Oct 2 19:30:27.886775 kubelet[2004]: I1002 19:30:27.886748 2004 eviction_manager.go:353] "Eviction manager: able to reduce resource pressure without evicting pods." resourceName="ephemeral-storage" Oct 2 19:30:28.594236 env[1141]: time="2023-10-02T19:30:28.594188873Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:30:28.595448 env[1141]: time="2023-10-02T19:30:28.595402675Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:30:28.598142 env[1141]: time="2023-10-02T19:30:28.598104039Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:30:28.598776 env[1141]: time="2023-10-02T19:30:28.598736359Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 19:30:28.599558 env[1141]: time="2023-10-02T19:30:28.599529801Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:30:28.602526 env[1141]: time="2023-10-02T19:30:28.601962284Z" level=info msg="CreateContainer within sandbox \"9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:30:28.618363 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2943678524.mount: Deactivated successfully. Oct 2 19:30:28.629571 env[1141]: time="2023-10-02T19:30:28.629506124Z" level=info msg="CreateContainer within sandbox \"9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"3274cde3946df894ac7242bb1891976c5a69d76d2db408d96e16dd3a208ac9b7\"" Oct 2 19:30:28.631949 env[1141]: time="2023-10-02T19:30:28.631906248Z" level=info msg="StartContainer for \"3274cde3946df894ac7242bb1891976c5a69d76d2db408d96e16dd3a208ac9b7\"" Oct 2 19:30:28.650308 systemd[1]: Started cri-containerd-3274cde3946df894ac7242bb1891976c5a69d76d2db408d96e16dd3a208ac9b7.scope. Oct 2 19:30:28.673183 systemd[1]: cri-containerd-3274cde3946df894ac7242bb1891976c5a69d76d2db408d96e16dd3a208ac9b7.scope: Deactivated successfully. Oct 2 19:30:28.677177 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3274cde3946df894ac7242bb1891976c5a69d76d2db408d96e16dd3a208ac9b7-rootfs.mount: Deactivated successfully. Oct 2 19:30:28.983987 env[1141]: time="2023-10-02T19:30:28.983145677Z" level=info msg="shim disconnected" id=3274cde3946df894ac7242bb1891976c5a69d76d2db408d96e16dd3a208ac9b7 Oct 2 19:30:28.983987 env[1141]: time="2023-10-02T19:30:28.983197477Z" level=warning msg="cleaning up after shim disconnected" id=3274cde3946df894ac7242bb1891976c5a69d76d2db408d96e16dd3a208ac9b7 namespace=k8s.io Oct 2 19:30:28.983987 env[1141]: time="2023-10-02T19:30:28.983206957Z" level=info msg="cleaning up dead shim" Oct 2 19:30:28.993399 env[1141]: time="2023-10-02T19:30:28.993338532Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:30:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2395 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:30:28Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/3274cde3946df894ac7242bb1891976c5a69d76d2db408d96e16dd3a208ac9b7/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:30:28.993738 env[1141]: time="2023-10-02T19:30:28.993609372Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:30:28.994040 env[1141]: time="2023-10-02T19:30:28.993965773Z" level=error msg="Failed to pipe stderr of container \"3274cde3946df894ac7242bb1891976c5a69d76d2db408d96e16dd3a208ac9b7\"" error="reading from a closed fifo" Oct 2 19:30:28.996303 env[1141]: time="2023-10-02T19:30:28.996253976Z" level=error msg="Failed to pipe stdout of container \"3274cde3946df894ac7242bb1891976c5a69d76d2db408d96e16dd3a208ac9b7\"" error="reading from a closed fifo" Oct 2 19:30:29.000955 env[1141]: time="2023-10-02T19:30:29.000873623Z" level=error msg="StartContainer for \"3274cde3946df894ac7242bb1891976c5a69d76d2db408d96e16dd3a208ac9b7\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:30:29.001240 kubelet[2004]: E1002 19:30:29.001208 2004 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="3274cde3946df894ac7242bb1891976c5a69d76d2db408d96e16dd3a208ac9b7" Oct 2 19:30:29.017017 kubelet[2004]: E1002 19:30:29.016953 2004 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:30:29.017017 kubelet[2004]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:30:29.017017 kubelet[2004]: rm /hostbin/cilium-mount Oct 2 19:30:29.017235 kubelet[2004]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ccrx5,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:30:29.017235 kubelet[2004]: E1002 19:30:29.017020 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-sj7vg" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e Oct 2 19:30:29.209627 kubelet[2004]: E1002 19:30:29.209142 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:29.214234 env[1141]: time="2023-10-02T19:30:29.213295552Z" level=info msg="CreateContainer within sandbox \"9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:30:29.258568 env[1141]: time="2023-10-02T19:30:29.258038733Z" level=info msg="CreateContainer within sandbox \"9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"622f2d6f4c8a40b86c387f345ffd70db206b3d8f62bfc1cfcfb0965154e60084\"" Oct 2 19:30:29.259940 env[1141]: time="2023-10-02T19:30:29.259879615Z" level=info msg="StartContainer for \"622f2d6f4c8a40b86c387f345ffd70db206b3d8f62bfc1cfcfb0965154e60084\"" Oct 2 19:30:29.279022 systemd[1]: Started cri-containerd-622f2d6f4c8a40b86c387f345ffd70db206b3d8f62bfc1cfcfb0965154e60084.scope. Oct 2 19:30:29.304132 systemd[1]: cri-containerd-622f2d6f4c8a40b86c387f345ffd70db206b3d8f62bfc1cfcfb0965154e60084.scope: Deactivated successfully. Oct 2 19:30:29.316844 env[1141]: time="2023-10-02T19:30:29.316775173Z" level=info msg="shim disconnected" id=622f2d6f4c8a40b86c387f345ffd70db206b3d8f62bfc1cfcfb0965154e60084 Oct 2 19:30:29.316844 env[1141]: time="2023-10-02T19:30:29.316828453Z" level=warning msg="cleaning up after shim disconnected" id=622f2d6f4c8a40b86c387f345ffd70db206b3d8f62bfc1cfcfb0965154e60084 namespace=k8s.io Oct 2 19:30:29.316844 env[1141]: time="2023-10-02T19:30:29.316838693Z" level=info msg="cleaning up dead shim" Oct 2 19:30:29.326291 env[1141]: time="2023-10-02T19:30:29.326230385Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:30:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2433 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:30:29Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/622f2d6f4c8a40b86c387f345ffd70db206b3d8f62bfc1cfcfb0965154e60084/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:30:29.326555 env[1141]: time="2023-10-02T19:30:29.326487906Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 19:30:29.326731 env[1141]: time="2023-10-02T19:30:29.326688906Z" level=error msg="Failed to pipe stdout of container \"622f2d6f4c8a40b86c387f345ffd70db206b3d8f62bfc1cfcfb0965154e60084\"" error="reading from a closed fifo" Oct 2 19:30:29.326859 env[1141]: time="2023-10-02T19:30:29.326814266Z" level=error msg="Failed to pipe stderr of container \"622f2d6f4c8a40b86c387f345ffd70db206b3d8f62bfc1cfcfb0965154e60084\"" error="reading from a closed fifo" Oct 2 19:30:29.328097 env[1141]: time="2023-10-02T19:30:29.328037148Z" level=error msg="StartContainer for \"622f2d6f4c8a40b86c387f345ffd70db206b3d8f62bfc1cfcfb0965154e60084\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:30:29.329752 kubelet[2004]: E1002 19:30:29.328313 2004 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="622f2d6f4c8a40b86c387f345ffd70db206b3d8f62bfc1cfcfb0965154e60084" Oct 2 19:30:29.329752 kubelet[2004]: E1002 19:30:29.328417 2004 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:30:29.329752 kubelet[2004]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:30:29.329752 kubelet[2004]: rm /hostbin/cilium-mount Oct 2 19:30:29.329752 kubelet[2004]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ccrx5,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:30:29.329752 kubelet[2004]: E1002 19:30:29.328453 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-sj7vg" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e Oct 2 19:30:30.193349 env[1141]: time="2023-10-02T19:30:30.193292149Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:30:30.195946 env[1141]: time="2023-10-02T19:30:30.195905552Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:30:30.197992 env[1141]: time="2023-10-02T19:30:30.197956915Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:30:30.198844 env[1141]: time="2023-10-02T19:30:30.198813836Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 19:30:30.201710 env[1141]: time="2023-10-02T19:30:30.201621199Z" level=info msg="CreateContainer within sandbox \"b57ea8fee9c8a2914d364bf228f561b6daae92e38e62877ccda29b565c292e15\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:30:30.211868 kubelet[2004]: I1002 19:30:30.211833 2004 scope.go:115] "RemoveContainer" containerID="3274cde3946df894ac7242bb1891976c5a69d76d2db408d96e16dd3a208ac9b7" Oct 2 19:30:30.213319 kubelet[2004]: I1002 19:30:30.212074 2004 scope.go:115] "RemoveContainer" containerID="3274cde3946df894ac7242bb1891976c5a69d76d2db408d96e16dd3a208ac9b7" Oct 2 19:30:30.214064 env[1141]: time="2023-10-02T19:30:30.214022055Z" level=info msg="RemoveContainer for \"3274cde3946df894ac7242bb1891976c5a69d76d2db408d96e16dd3a208ac9b7\"" Oct 2 19:30:30.217171 env[1141]: time="2023-10-02T19:30:30.216256098Z" level=info msg="RemoveContainer for \"3274cde3946df894ac7242bb1891976c5a69d76d2db408d96e16dd3a208ac9b7\" returns successfully" Oct 2 19:30:30.217171 env[1141]: time="2023-10-02T19:30:30.216437018Z" level=info msg="RemoveContainer for \"3274cde3946df894ac7242bb1891976c5a69d76d2db408d96e16dd3a208ac9b7\"" Oct 2 19:30:30.217171 env[1141]: time="2023-10-02T19:30:30.216456138Z" level=info msg="RemoveContainer for \"3274cde3946df894ac7242bb1891976c5a69d76d2db408d96e16dd3a208ac9b7\" returns successfully" Oct 2 19:30:30.218315 kubelet[2004]: E1002 19:30:30.217722 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:30.218315 kubelet[2004]: E1002 19:30:30.217979 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e)\"" pod="kube-system/cilium-sj7vg" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e Oct 2 19:30:30.220512 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2769091167.mount: Deactivated successfully. Oct 2 19:30:30.231826 env[1141]: time="2023-10-02T19:30:30.231778158Z" level=info msg="CreateContainer within sandbox \"b57ea8fee9c8a2914d364bf228f561b6daae92e38e62877ccda29b565c292e15\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"1a52933e9d82d8ba126cd466a840577da5c4a0e0b62af9713d7cc038fb2b046c\"" Oct 2 19:30:30.232818 env[1141]: time="2023-10-02T19:30:30.232783559Z" level=info msg="StartContainer for \"1a52933e9d82d8ba126cd466a840577da5c4a0e0b62af9713d7cc038fb2b046c\"" Oct 2 19:30:30.248972 systemd[1]: Started cri-containerd-1a52933e9d82d8ba126cd466a840577da5c4a0e0b62af9713d7cc038fb2b046c.scope. Oct 2 19:30:30.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.276339 kernel: kauditd_printk_skb: 372 callbacks suppressed Oct 2 19:30:30.276449 kernel: audit: type=1400 audit(1696275030.272:1041): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.276475 kernel: audit: type=1400 audit(1696275030.272:1042): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.281066 kernel: audit: type=1400 audit(1696275030.272:1043): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.281137 kernel: audit: type=1400 audit(1696275030.272:1044): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.285851 kernel: audit: type=1400 audit(1696275030.272:1045): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.285946 kernel: audit: type=1400 audit(1696275030.272:1046): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.290672 kernel: audit: type=1400 audit(1696275030.272:1047): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.293607 kernel: audit: type=1400 audit(1696275030.272:1048): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.293694 kernel: audit: type=1400 audit(1696275030.272:1049): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.298431 kernel: audit: type=1400 audit(1696275030.272:1050): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.272000 audit: BPF prog-id=121 op=LOAD Oct 2 19:30:30.273000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.273000 audit[2453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2202 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:30.273000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161353239333365396438326438626131323663643436366138343035 Oct 2 19:30:30.273000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.273000 audit[2453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2202 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:30.273000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161353239333365396438326438626131323663643436366138343035 Oct 2 19:30:30.273000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.273000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.273000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.273000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.273000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.273000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.273000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.273000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.273000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.273000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.273000 audit: BPF prog-id=122 op=LOAD Oct 2 19:30:30.273000 audit[2453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2202 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:30.273000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161353239333365396438326438626131323663643436366138343035 Oct 2 19:30:30.275000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.275000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.275000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.275000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.275000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.275000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.275000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.275000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.275000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.275000 audit: BPF prog-id=123 op=LOAD Oct 2 19:30:30.275000 audit[2453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2202 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:30.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161353239333365396438326438626131323663643436366138343035 Oct 2 19:30:30.277000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:30:30.277000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:30:30.277000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.277000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.277000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.277000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.277000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.277000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.277000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.277000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.277000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.277000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:30.277000 audit: BPF prog-id=124 op=LOAD Oct 2 19:30:30.277000 audit[2453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2202 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:30.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161353239333365396438326438626131323663643436366138343035 Oct 2 19:30:30.309935 env[1141]: time="2023-10-02T19:30:30.309885897Z" level=info msg="StartContainer for \"1a52933e9d82d8ba126cd466a840577da5c4a0e0b62af9713d7cc038fb2b046c\" returns successfully" Oct 2 19:30:30.374000 audit[2464]: AVC avc: denied { map_create } for pid=2464 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c391,c1016 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c391,c1016 tclass=bpf permissive=0 Oct 2 19:30:30.374000 audit[2464]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=4000711768 a2=48 a3=0 items=0 ppid=2202 pid=2464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c391,c1016 key=(null) Oct 2 19:30:30.374000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:30:31.216027 kubelet[2004]: E1002 19:30:31.215996 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:31.216488 kubelet[2004]: E1002 19:30:31.216235 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e)\"" pod="kube-system/cilium-sj7vg" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e Oct 2 19:30:31.218792 kubelet[2004]: E1002 19:30:31.218766 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:31.263685 kubelet[2004]: I1002 19:30:31.263648 2004 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-574c4bb98d-vlmfj" podStartSLOduration=1.757175609 podCreationTimestamp="2023-10-02 19:30:22 +0000 UTC" firstStartedPulling="2023-10-02 19:30:22.693058312 +0000 UTC m=+15.677250729" lastFinishedPulling="2023-10-02 19:30:30.199489996 +0000 UTC m=+23.183682373" observedRunningTime="2023-10-02 19:30:31.263388092 +0000 UTC m=+24.247580509" watchObservedRunningTime="2023-10-02 19:30:31.263607253 +0000 UTC m=+24.247799670" Oct 2 19:30:32.095716 kubelet[2004]: W1002 19:30:32.095664 2004 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod34b8cc7b_5768_41e5_9c5b_122435a1fb3e.slice/cri-containerd-3274cde3946df894ac7242bb1891976c5a69d76d2db408d96e16dd3a208ac9b7.scope WatchSource:0}: container "3274cde3946df894ac7242bb1891976c5a69d76d2db408d96e16dd3a208ac9b7" in namespace "k8s.io": not found Oct 2 19:30:32.220257 kubelet[2004]: E1002 19:30:32.220172 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:35.201952 kubelet[2004]: W1002 19:30:35.201915 2004 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod34b8cc7b_5768_41e5_9c5b_122435a1fb3e.slice/cri-containerd-622f2d6f4c8a40b86c387f345ffd70db206b3d8f62bfc1cfcfb0965154e60084.scope WatchSource:0}: task 622f2d6f4c8a40b86c387f345ffd70db206b3d8f62bfc1cfcfb0965154e60084 not found: not found Oct 2 19:30:46.148039 kubelet[2004]: E1002 19:30:46.148005 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:46.150954 env[1141]: time="2023-10-02T19:30:46.150789914Z" level=info msg="CreateContainer within sandbox \"9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:30:46.200004 env[1141]: time="2023-10-02T19:30:46.199920536Z" level=info msg="CreateContainer within sandbox \"9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56\"" Oct 2 19:30:46.201168 env[1141]: time="2023-10-02T19:30:46.201108976Z" level=info msg="StartContainer for \"6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56\"" Oct 2 19:30:46.235819 systemd[1]: Started cri-containerd-6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56.scope. Oct 2 19:30:46.274311 systemd[1]: cri-containerd-6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56.scope: Deactivated successfully. Oct 2 19:30:46.280524 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56-rootfs.mount: Deactivated successfully. Oct 2 19:30:46.298658 env[1141]: time="2023-10-02T19:30:46.298604901Z" level=info msg="shim disconnected" id=6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56 Oct 2 19:30:46.298658 env[1141]: time="2023-10-02T19:30:46.298660381Z" level=warning msg="cleaning up after shim disconnected" id=6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56 namespace=k8s.io Oct 2 19:30:46.298658 env[1141]: time="2023-10-02T19:30:46.298671101Z" level=info msg="cleaning up dead shim" Oct 2 19:30:46.310095 env[1141]: time="2023-10-02T19:30:46.309999946Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:30:46Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2510 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:30:46Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:30:46.310412 env[1141]: time="2023-10-02T19:30:46.310343586Z" level=error msg="copy shim log" error="read /proc/self/fd/61: file already closed" Oct 2 19:30:46.310654 env[1141]: time="2023-10-02T19:30:46.310607986Z" level=error msg="Failed to pipe stderr of container \"6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56\"" error="reading from a closed fifo" Oct 2 19:30:46.312409 env[1141]: time="2023-10-02T19:30:46.312368587Z" level=error msg="Failed to pipe stdout of container \"6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56\"" error="reading from a closed fifo" Oct 2 19:30:46.314464 env[1141]: time="2023-10-02T19:30:46.314415828Z" level=error msg="StartContainer for \"6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:30:46.314834 kubelet[2004]: E1002 19:30:46.314796 2004 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56" Oct 2 19:30:46.314924 kubelet[2004]: E1002 19:30:46.314903 2004 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:30:46.314924 kubelet[2004]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:30:46.314924 kubelet[2004]: rm /hostbin/cilium-mount Oct 2 19:30:46.314924 kubelet[2004]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ccrx5,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:30:46.315063 kubelet[2004]: E1002 19:30:46.314939 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-sj7vg" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e Oct 2 19:30:47.259254 kubelet[2004]: I1002 19:30:47.259225 2004 scope.go:115] "RemoveContainer" containerID="622f2d6f4c8a40b86c387f345ffd70db206b3d8f62bfc1cfcfb0965154e60084" Oct 2 19:30:47.260020 kubelet[2004]: I1002 19:30:47.259990 2004 scope.go:115] "RemoveContainer" containerID="622f2d6f4c8a40b86c387f345ffd70db206b3d8f62bfc1cfcfb0965154e60084" Oct 2 19:30:47.261751 env[1141]: time="2023-10-02T19:30:47.261709891Z" level=info msg="RemoveContainer for \"622f2d6f4c8a40b86c387f345ffd70db206b3d8f62bfc1cfcfb0965154e60084\"" Oct 2 19:30:47.263278 env[1141]: time="2023-10-02T19:30:47.262448571Z" level=info msg="RemoveContainer for \"622f2d6f4c8a40b86c387f345ffd70db206b3d8f62bfc1cfcfb0965154e60084\"" Oct 2 19:30:47.263278 env[1141]: time="2023-10-02T19:30:47.262555571Z" level=error msg="RemoveContainer for \"622f2d6f4c8a40b86c387f345ffd70db206b3d8f62bfc1cfcfb0965154e60084\" failed" error="failed to set removing state for container \"622f2d6f4c8a40b86c387f345ffd70db206b3d8f62bfc1cfcfb0965154e60084\": container is already in removing state" Oct 2 19:30:47.263353 kubelet[2004]: E1002 19:30:47.262697 2004 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"622f2d6f4c8a40b86c387f345ffd70db206b3d8f62bfc1cfcfb0965154e60084\": container is already in removing state" containerID="622f2d6f4c8a40b86c387f345ffd70db206b3d8f62bfc1cfcfb0965154e60084" Oct 2 19:30:47.263353 kubelet[2004]: E1002 19:30:47.262737 2004 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "622f2d6f4c8a40b86c387f345ffd70db206b3d8f62bfc1cfcfb0965154e60084": container is already in removing state; Skipping pod "cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e)" Oct 2 19:30:47.263353 kubelet[2004]: E1002 19:30:47.262845 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:30:47.263353 kubelet[2004]: E1002 19:30:47.263121 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e)\"" pod="kube-system/cilium-sj7vg" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e Oct 2 19:30:47.264860 env[1141]: time="2023-10-02T19:30:47.264821252Z" level=info msg="RemoveContainer for \"622f2d6f4c8a40b86c387f345ffd70db206b3d8f62bfc1cfcfb0965154e60084\" returns successfully" Oct 2 19:30:49.403174 kubelet[2004]: W1002 19:30:49.403107 2004 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod34b8cc7b_5768_41e5_9c5b_122435a1fb3e.slice/cri-containerd-6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56.scope WatchSource:0}: task 6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56 not found: not found Oct 2 19:30:57.564167 systemd[1]: Started sshd@7-10.0.0.8:22-10.0.0.1:34100.service. Oct 2 19:30:57.563000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.8:22-10.0.0.1:34100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:57.565258 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:30:57.565343 kernel: audit: type=1130 audit(1696275057.563:1060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.8:22-10.0.0.1:34100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:57.620000 audit[2527]: USER_ACCT pid=2527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:30:57.621790 sshd[2527]: Accepted publickey for core from 10.0.0.1 port 34100 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:30:57.623658 sshd[2527]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:30:57.622000 audit[2527]: CRED_ACQ pid=2527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:30:57.627984 kernel: audit: type=1101 audit(1696275057.620:1061): pid=2527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:30:57.628050 kernel: audit: type=1103 audit(1696275057.622:1062): pid=2527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:30:57.628070 kernel: audit: type=1006 audit(1696275057.622:1063): pid=2527 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 19:30:57.627696 systemd-logind[1131]: New session 8 of user core. Oct 2 19:30:57.628188 systemd[1]: Started session-8.scope. Oct 2 19:30:57.622000 audit[2527]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff8332d40 a2=3 a3=1 items=0 ppid=1 pid=2527 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:57.633186 kernel: audit: type=1300 audit(1696275057.622:1063): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff8332d40 a2=3 a3=1 items=0 ppid=1 pid=2527 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:57.633240 kernel: audit: type=1327 audit(1696275057.622:1063): proctitle=737368643A20636F7265205B707269765D Oct 2 19:30:57.622000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:30:57.631000 audit[2527]: USER_START pid=2527 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:30:57.638174 kernel: audit: type=1105 audit(1696275057.631:1064): pid=2527 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:30:57.638237 kernel: audit: type=1103 audit(1696275057.633:1065): pid=2529 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:30:57.633000 audit[2529]: CRED_ACQ pid=2529 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:30:57.782930 sshd[2527]: pam_unix(sshd:session): session closed for user core Oct 2 19:30:57.782000 audit[2527]: USER_END pid=2527 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:30:57.785698 systemd[1]: sshd@7-10.0.0.8:22-10.0.0.1:34100.service: Deactivated successfully. Oct 2 19:30:57.786485 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:30:57.787157 systemd-logind[1131]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:30:57.783000 audit[2527]: CRED_DISP pid=2527 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:30:57.788212 systemd-logind[1131]: Removed session 8. Oct 2 19:30:57.790786 kernel: audit: type=1106 audit(1696275057.782:1066): pid=2527 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:30:57.790879 kernel: audit: type=1104 audit(1696275057.783:1067): pid=2527 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:30:57.783000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.8:22-10.0.0.1:34100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:01.148430 kubelet[2004]: E1002 19:31:01.148389 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:31:01.148770 kubelet[2004]: E1002 19:31:01.148634 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e)\"" pod="kube-system/cilium-sj7vg" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e Oct 2 19:31:03.762000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:03.764517 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:31:03.764600 kernel: audit: type=1400 audit(1696275063.762:1070): avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:03.762000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:03.770513 kernel: audit: type=1400 audit(1696275063.762:1069): avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:03.770600 kernel: audit: type=1300 audit(1696275063.762:1070): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a06b20 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:31:03.762000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a06b20 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:31:03.762000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:03.777752 kernel: audit: type=1327 audit(1696275063.762:1070): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:03.777835 kernel: audit: type=1300 audit(1696275063.762:1069): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400100f710 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:31:03.762000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400100f710 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:31:03.762000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:03.784671 kernel: audit: type=1327 audit(1696275063.762:1069): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:04.035000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:04.035000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:04.043151 kernel: audit: type=1400 audit(1696275064.035:1071): avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:04.043235 kernel: audit: type=1400 audit(1696275064.035:1072): avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:04.043259 kernel: audit: type=1300 audit(1696275064.035:1072): arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4004357080 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:31:04.035000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4004357080 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:31:04.035000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40092930a0 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:31:04.051081 kernel: audit: type=1300 audit(1696275064.035:1071): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40092930a0 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:31:04.035000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:31:04.035000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:31:04.036000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:04.036000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40041ad2f0 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:31:04.036000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:31:04.045000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6811 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:04.045000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400a9a35f0 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:31:04.045000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:31:04.056000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:04.056000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400d255540 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:31:04.056000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:31:04.056000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:04.056000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4004439bf0 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:31:04.056000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:31:07.788135 systemd[1]: Started sshd@8-10.0.0.8:22-10.0.0.1:35218.service. Oct 2 19:31:07.787000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.8:22-10.0.0.1:35218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:07.832000 audit[2549]: USER_ACCT pid=2549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:07.835058 sshd[2549]: Accepted publickey for core from 10.0.0.1 port 35218 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:31:07.834000 audit[2549]: CRED_ACQ pid=2549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:07.834000 audit[2549]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff531d7e0 a2=3 a3=1 items=0 ppid=1 pid=2549 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:07.834000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:31:07.836241 sshd[2549]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:31:07.839846 systemd-logind[1131]: New session 9 of user core. Oct 2 19:31:07.840773 systemd[1]: Started session-9.scope. Oct 2 19:31:07.843000 audit[2549]: USER_START pid=2549 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:07.844000 audit[2551]: CRED_ACQ pid=2551 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:07.959001 sshd[2549]: pam_unix(sshd:session): session closed for user core Oct 2 19:31:07.962000 audit[2549]: USER_END pid=2549 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:07.962000 audit[2549]: CRED_DISP pid=2549 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:07.967171 systemd[1]: sshd@8-10.0.0.8:22-10.0.0.1:35218.service: Deactivated successfully. Oct 2 19:31:07.968000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.8:22-10.0.0.1:35218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:07.969861 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:31:07.970664 systemd-logind[1131]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:31:07.971511 systemd-logind[1131]: Removed session 9. Oct 2 19:31:16.148534 kubelet[2004]: E1002 19:31:16.148475 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:31:16.151179 env[1141]: time="2023-10-02T19:31:16.151125450Z" level=info msg="CreateContainer within sandbox \"9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:31:16.174535 env[1141]: time="2023-10-02T19:31:16.174467742Z" level=info msg="CreateContainer within sandbox \"9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8\"" Oct 2 19:31:16.175550 env[1141]: time="2023-10-02T19:31:16.175508151Z" level=info msg="StartContainer for \"eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8\"" Oct 2 19:31:16.198693 systemd[1]: Started cri-containerd-eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8.scope. Oct 2 19:31:16.246678 systemd[1]: cri-containerd-eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8.scope: Deactivated successfully. Oct 2 19:31:16.260061 env[1141]: time="2023-10-02T19:31:16.260007479Z" level=info msg="shim disconnected" id=eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8 Oct 2 19:31:16.260395 env[1141]: time="2023-10-02T19:31:16.260366963Z" level=warning msg="cleaning up after shim disconnected" id=eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8 namespace=k8s.io Oct 2 19:31:16.260484 env[1141]: time="2023-10-02T19:31:16.260468684Z" level=info msg="cleaning up dead shim" Oct 2 19:31:16.269853 env[1141]: time="2023-10-02T19:31:16.269804328Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:31:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2586 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:31:16Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:31:16.270305 env[1141]: time="2023-10-02T19:31:16.270245972Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 19:31:16.272243 env[1141]: time="2023-10-02T19:31:16.270583616Z" level=error msg="Failed to pipe stderr of container \"eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8\"" error="reading from a closed fifo" Oct 2 19:31:16.272399 env[1141]: time="2023-10-02T19:31:16.272174950Z" level=error msg="Failed to pipe stdout of container \"eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8\"" error="reading from a closed fifo" Oct 2 19:31:16.274021 env[1141]: time="2023-10-02T19:31:16.273975246Z" level=error msg="StartContainer for \"eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:31:16.274663 kubelet[2004]: E1002 19:31:16.274331 2004 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8" Oct 2 19:31:16.274663 kubelet[2004]: E1002 19:31:16.274446 2004 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:31:16.274663 kubelet[2004]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:31:16.274663 kubelet[2004]: rm /hostbin/cilium-mount Oct 2 19:31:16.274663 kubelet[2004]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ccrx5,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:31:16.274663 kubelet[2004]: E1002 19:31:16.274484 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-sj7vg" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e Oct 2 19:31:16.310154 kubelet[2004]: I1002 19:31:16.309829 2004 scope.go:115] "RemoveContainer" containerID="6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56" Oct 2 19:31:16.310411 kubelet[2004]: I1002 19:31:16.310362 2004 scope.go:115] "RemoveContainer" containerID="6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56" Oct 2 19:31:16.311951 env[1141]: time="2023-10-02T19:31:16.311915231Z" level=info msg="RemoveContainer for \"6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56\"" Oct 2 19:31:16.312492 env[1141]: time="2023-10-02T19:31:16.312454716Z" level=info msg="RemoveContainer for \"6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56\"" Oct 2 19:31:16.312620 env[1141]: time="2023-10-02T19:31:16.312543557Z" level=error msg="RemoveContainer for \"6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56\" failed" error="failed to set removing state for container \"6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56\": container is already in removing state" Oct 2 19:31:16.313298 kubelet[2004]: E1002 19:31:16.312749 2004 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56\": container is already in removing state" containerID="6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56" Oct 2 19:31:16.313298 kubelet[2004]: E1002 19:31:16.312781 2004 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56": container is already in removing state; Skipping pod "cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e)" Oct 2 19:31:16.313298 kubelet[2004]: E1002 19:31:16.312837 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:31:16.313298 kubelet[2004]: E1002 19:31:16.313049 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e)\"" pod="kube-system/cilium-sj7vg" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e Oct 2 19:31:16.399774 env[1141]: time="2023-10-02T19:31:16.399567948Z" level=info msg="RemoveContainer for \"6c5197badaa357e29f21726e001188f6916603788f16849835ea340b16dcae56\" returns successfully" Oct 2 19:31:17.164055 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8-rootfs.mount: Deactivated successfully. Oct 2 19:31:17.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.8:22-10.0.0.1:53706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:17.963902 systemd[1]: Started sshd@9-10.0.0.8:22-10.0.0.1:53706.service. Oct 2 19:31:17.965140 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:31:17.965224 kernel: audit: type=1130 audit(1696275077.962:1086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.8:22-10.0.0.1:53706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:18.011000 audit[2600]: USER_ACCT pid=2600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:18.013310 sshd[2600]: Accepted publickey for core from 10.0.0.1 port 53706 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:31:18.014333 sshd[2600]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:31:18.016133 kernel: audit: type=1101 audit(1696275078.011:1087): pid=2600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:18.016214 kernel: audit: type=1103 audit(1696275078.012:1088): pid=2600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:18.012000 audit[2600]: CRED_ACQ pid=2600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:18.018841 systemd-logind[1131]: New session 10 of user core. Oct 2 19:31:18.019319 systemd[1]: Started session-10.scope. Oct 2 19:31:18.023582 kernel: audit: type=1006 audit(1696275078.012:1089): pid=2600 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:31:18.023673 kernel: audit: type=1300 audit(1696275078.012:1089): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff00d9400 a2=3 a3=1 items=0 ppid=1 pid=2600 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:18.012000 audit[2600]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff00d9400 a2=3 a3=1 items=0 ppid=1 pid=2600 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:18.012000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:31:18.028073 kernel: audit: type=1327 audit(1696275078.012:1089): proctitle=737368643A20636F7265205B707269765D Oct 2 19:31:18.033000 audit[2600]: USER_START pid=2600 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:18.035000 audit[2602]: CRED_ACQ pid=2602 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:18.041096 kernel: audit: type=1105 audit(1696275078.033:1090): pid=2600 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:18.041181 kernel: audit: type=1103 audit(1696275078.035:1091): pid=2602 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:18.160568 sshd[2600]: pam_unix(sshd:session): session closed for user core Oct 2 19:31:18.160000 audit[2600]: USER_END pid=2600 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:18.164866 systemd[1]: sshd@9-10.0.0.8:22-10.0.0.1:53706.service: Deactivated successfully. Oct 2 19:31:18.165720 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:31:18.161000 audit[2600]: CRED_DISP pid=2600 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:18.166323 systemd-logind[1131]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:31:18.167222 systemd-logind[1131]: Removed session 10. Oct 2 19:31:18.169307 kernel: audit: type=1106 audit(1696275078.160:1092): pid=2600 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:18.169376 kernel: audit: type=1104 audit(1696275078.161:1093): pid=2600 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:18.164000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.8:22-10.0.0.1:53706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:19.217000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:19.217000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400260e6e0 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:31:19.217000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:19.218000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:19.218000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ea8d60 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:31:19.218000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:19.219000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:19.219000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001116420 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:31:19.219000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:19.220000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:19.220000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ea8ec0 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:31:19.220000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:19.370635 kubelet[2004]: W1002 19:31:19.370587 2004 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod34b8cc7b_5768_41e5_9c5b_122435a1fb3e.slice/cri-containerd-eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8.scope WatchSource:0}: task eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8 not found: not found Oct 2 19:31:23.148190 kubelet[2004]: E1002 19:31:23.148149 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:31:28.147693 kubelet[2004]: E1002 19:31:28.147647 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:31:28.148090 kubelet[2004]: E1002 19:31:28.147865 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e)\"" pod="kube-system/cilium-sj7vg" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e Oct 2 19:31:28.170425 systemd[1]: Started sshd@10-10.0.0.8:22-10.0.0.1:36444.service. Oct 2 19:31:28.169000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.8:22-10.0.0.1:36444 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:28.171385 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:31:28.171463 kernel: audit: type=1130 audit(1696275088.169:1099): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.8:22-10.0.0.1:36444 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:28.213000 audit[2616]: USER_ACCT pid=2616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:28.214961 sshd[2616]: Accepted publickey for core from 10.0.0.1 port 36444 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:31:28.216109 sshd[2616]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:31:28.214000 audit[2616]: CRED_ACQ pid=2616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:28.220218 systemd-logind[1131]: New session 11 of user core. Oct 2 19:31:28.221393 kernel: audit: type=1101 audit(1696275088.213:1100): pid=2616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:28.221439 kernel: audit: type=1103 audit(1696275088.214:1101): pid=2616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:28.221460 kernel: audit: type=1006 audit(1696275088.214:1102): pid=2616 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:31:28.220732 systemd[1]: Started session-11.scope. Oct 2 19:31:28.214000 audit[2616]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd79b3350 a2=3 a3=1 items=0 ppid=1 pid=2616 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:28.226759 kernel: audit: type=1300 audit(1696275088.214:1102): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd79b3350 a2=3 a3=1 items=0 ppid=1 pid=2616 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:28.226834 kernel: audit: type=1327 audit(1696275088.214:1102): proctitle=737368643A20636F7265205B707269765D Oct 2 19:31:28.214000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:31:28.223000 audit[2616]: USER_START pid=2616 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:28.231325 kernel: audit: type=1105 audit(1696275088.223:1103): pid=2616 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:28.231484 kernel: audit: type=1103 audit(1696275088.225:1104): pid=2618 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:28.225000 audit[2618]: CRED_ACQ pid=2618 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:28.336179 sshd[2616]: pam_unix(sshd:session): session closed for user core Oct 2 19:31:28.336000 audit[2616]: USER_END pid=2616 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:28.338827 systemd[1]: sshd@10-10.0.0.8:22-10.0.0.1:36444.service: Deactivated successfully. Oct 2 19:31:28.339586 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:31:28.340154 systemd-logind[1131]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:31:28.340909 systemd-logind[1131]: Removed session 11. Oct 2 19:31:28.336000 audit[2616]: CRED_DISP pid=2616 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:28.343964 kernel: audit: type=1106 audit(1696275088.336:1105): pid=2616 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:28.344029 kernel: audit: type=1104 audit(1696275088.336:1106): pid=2616 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:28.336000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.8:22-10.0.0.1:36444 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:31.148096 kubelet[2004]: E1002 19:31:31.148067 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:31:38.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.8:22-10.0.0.1:44006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:38.341923 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:31:38.341957 kernel: audit: type=1130 audit(1696275098.339:1108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.8:22-10.0.0.1:44006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:38.340898 systemd[1]: Started sshd@11-10.0.0.8:22-10.0.0.1:44006.service. Oct 2 19:31:38.386000 audit[2630]: USER_ACCT pid=2630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:38.388193 sshd[2630]: Accepted publickey for core from 10.0.0.1 port 44006 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:31:38.389814 sshd[2630]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:31:38.388000 audit[2630]: CRED_ACQ pid=2630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:38.394711 systemd-logind[1131]: New session 12 of user core. Oct 2 19:31:38.395164 kernel: audit: type=1101 audit(1696275098.386:1109): pid=2630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:38.395698 kernel: audit: type=1103 audit(1696275098.388:1110): pid=2630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:38.395724 kernel: audit: type=1006 audit(1696275098.388:1111): pid=2630 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:31:38.396001 systemd[1]: Started session-12.scope. Oct 2 19:31:38.388000 audit[2630]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffef9791a0 a2=3 a3=1 items=0 ppid=1 pid=2630 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:38.400196 kernel: audit: type=1300 audit(1696275098.388:1111): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffef9791a0 a2=3 a3=1 items=0 ppid=1 pid=2630 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:38.400273 kernel: audit: type=1327 audit(1696275098.388:1111): proctitle=737368643A20636F7265205B707269765D Oct 2 19:31:38.388000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:31:38.401488 kernel: audit: type=1105 audit(1696275098.400:1112): pid=2630 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:38.400000 audit[2630]: USER_START pid=2630 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:38.402000 audit[2632]: CRED_ACQ pid=2632 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:38.407694 kernel: audit: type=1103 audit(1696275098.402:1113): pid=2632 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:38.530423 sshd[2630]: pam_unix(sshd:session): session closed for user core Oct 2 19:31:38.530000 audit[2630]: USER_END pid=2630 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:38.533199 systemd[1]: sshd@11-10.0.0.8:22-10.0.0.1:44006.service: Deactivated successfully. Oct 2 19:31:38.534220 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:31:38.534876 systemd-logind[1131]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:31:38.535650 systemd-logind[1131]: Removed session 12. Oct 2 19:31:38.530000 audit[2630]: CRED_DISP pid=2630 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:38.540616 kernel: audit: type=1106 audit(1696275098.530:1114): pid=2630 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:38.540689 kernel: audit: type=1104 audit(1696275098.530:1115): pid=2630 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:38.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.8:22-10.0.0.1:44006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:42.148170 kubelet[2004]: E1002 19:31:42.148135 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:31:43.147855 kubelet[2004]: E1002 19:31:43.147821 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:31:43.148133 kubelet[2004]: E1002 19:31:43.148039 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e)\"" pod="kube-system/cilium-sj7vg" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e Oct 2 19:31:46.148788 kubelet[2004]: E1002 19:31:46.148712 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:31:48.536132 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:31:48.536255 kernel: audit: type=1130 audit(1696275108.533:1117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.8:22-10.0.0.1:55088 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:48.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.8:22-10.0.0.1:55088 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:48.534655 systemd[1]: Started sshd@12-10.0.0.8:22-10.0.0.1:55088.service. Oct 2 19:31:48.577000 audit[2644]: USER_ACCT pid=2644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:48.579292 sshd[2644]: Accepted publickey for core from 10.0.0.1 port 55088 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:31:48.580978 sshd[2644]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:31:48.579000 audit[2644]: CRED_ACQ pid=2644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:48.585223 kernel: audit: type=1101 audit(1696275108.577:1118): pid=2644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:48.585302 kernel: audit: type=1103 audit(1696275108.579:1119): pid=2644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:48.585328 kernel: audit: type=1006 audit(1696275108.579:1120): pid=2644 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:31:48.585667 systemd[1]: Started session-13.scope. Oct 2 19:31:48.585972 systemd-logind[1131]: New session 13 of user core. Oct 2 19:31:48.587026 kernel: audit: type=1300 audit(1696275108.579:1120): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee24b590 a2=3 a3=1 items=0 ppid=1 pid=2644 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:48.579000 audit[2644]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee24b590 a2=3 a3=1 items=0 ppid=1 pid=2644 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:48.579000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:31:48.591198 kernel: audit: type=1327 audit(1696275108.579:1120): proctitle=737368643A20636F7265205B707269765D Oct 2 19:31:48.591246 kernel: audit: type=1105 audit(1696275108.589:1121): pid=2644 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:48.589000 audit[2644]: USER_START pid=2644 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:48.590000 audit[2646]: CRED_ACQ pid=2646 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:48.597403 kernel: audit: type=1103 audit(1696275108.590:1122): pid=2646 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:48.705851 sshd[2644]: pam_unix(sshd:session): session closed for user core Oct 2 19:31:48.705000 audit[2644]: USER_END pid=2644 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:48.708421 systemd[1]: sshd@12-10.0.0.8:22-10.0.0.1:55088.service: Deactivated successfully. Oct 2 19:31:48.709184 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:31:48.709753 systemd-logind[1131]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:31:48.710419 systemd-logind[1131]: Removed session 13. Oct 2 19:31:48.705000 audit[2644]: CRED_DISP pid=2644 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:48.713679 kernel: audit: type=1106 audit(1696275108.705:1123): pid=2644 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:48.713743 kernel: audit: type=1104 audit(1696275108.705:1124): pid=2644 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:48.707000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.8:22-10.0.0.1:55088 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:55.148367 kubelet[2004]: E1002 19:31:55.148332 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:31:55.148770 kubelet[2004]: E1002 19:31:55.148565 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e)\"" pod="kube-system/cilium-sj7vg" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e Oct 2 19:31:56.148062 kubelet[2004]: E1002 19:31:56.148018 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:31:58.711646 systemd[1]: Started sshd@13-10.0.0.8:22-10.0.0.1:34034.service. Oct 2 19:31:58.710000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.8:22-10.0.0.1:34034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:58.712709 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:31:58.712906 kernel: audit: type=1130 audit(1696275118.710:1126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.8:22-10.0.0.1:34034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:58.756000 audit[2660]: USER_ACCT pid=2660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:58.758174 sshd[2660]: Accepted publickey for core from 10.0.0.1 port 34034 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:31:58.760098 sshd[2660]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:31:58.758000 audit[2660]: CRED_ACQ pid=2660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:58.764429 kernel: audit: type=1101 audit(1696275118.756:1127): pid=2660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:58.764515 kernel: audit: type=1103 audit(1696275118.758:1128): pid=2660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:58.764539 kernel: audit: type=1006 audit(1696275118.758:1129): pid=2660 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:31:58.764860 systemd-logind[1131]: New session 14 of user core. Oct 2 19:31:58.765233 systemd[1]: Started session-14.scope. Oct 2 19:31:58.758000 audit[2660]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffda6e0140 a2=3 a3=1 items=0 ppid=1 pid=2660 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:58.770567 kernel: audit: type=1300 audit(1696275118.758:1129): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffda6e0140 a2=3 a3=1 items=0 ppid=1 pid=2660 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:58.770676 kernel: audit: type=1327 audit(1696275118.758:1129): proctitle=737368643A20636F7265205B707269765D Oct 2 19:31:58.758000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:31:58.771844 kernel: audit: type=1105 audit(1696275118.768:1130): pid=2660 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:58.768000 audit[2660]: USER_START pid=2660 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:58.770000 audit[2662]: CRED_ACQ pid=2662 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:58.777424 kernel: audit: type=1103 audit(1696275118.770:1131): pid=2662 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:58.895948 sshd[2660]: pam_unix(sshd:session): session closed for user core Oct 2 19:31:58.895000 audit[2660]: USER_END pid=2660 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:58.898368 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:31:58.898976 systemd-logind[1131]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:31:58.899087 systemd[1]: sshd@13-10.0.0.8:22-10.0.0.1:34034.service: Deactivated successfully. Oct 2 19:31:58.900329 systemd-logind[1131]: Removed session 14. Oct 2 19:31:58.895000 audit[2660]: CRED_DISP pid=2660 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:58.905219 kernel: audit: type=1106 audit(1696275118.895:1132): pid=2660 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:58.905294 kernel: audit: type=1104 audit(1696275118.895:1133): pid=2660 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:58.898000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.8:22-10.0.0.1:34034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:03.762000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:03.765391 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:32:03.765446 kernel: audit: type=1400 audit(1696275123.762:1135): avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:03.762000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001451de0 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:32:03.772583 kernel: audit: type=1300 audit(1696275123.762:1135): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001451de0 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:32:03.772647 kernel: audit: type=1327 audit(1696275123.762:1135): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:03.762000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:03.764000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:03.779537 kernel: audit: type=1400 audit(1696275123.764:1136): avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:03.779652 kernel: audit: type=1300 audit(1696275123.764:1136): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400195d8f0 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:32:03.764000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400195d8f0 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:32:03.764000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:03.786783 kernel: audit: type=1327 audit(1696275123.764:1136): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:04.036000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:04.041135 kernel: audit: type=1400 audit(1696275124.036:1137): avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:04.036000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:04.036000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4007bf3a70 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:32:04.049935 kernel: audit: type=1400 audit(1696275124.036:1138): avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:04.050032 kernel: audit: type=1300 audit(1696275124.036:1138): arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4007bf3a70 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:32:04.036000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4007e11560 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:32:04.053880 kernel: audit: type=1300 audit(1696275124.036:1137): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4007e11560 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:32:04.036000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:32:04.036000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:32:04.040000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:04.040000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4007fa4f30 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:32:04.040000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:32:04.048000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6811 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:04.048000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4007bf3bc0 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:32:04.048000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:32:04.057000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:04.057000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4007e11700 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:32:04.057000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:32:04.057000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:04.057000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4007bf3bf0 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:32:04.057000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:32:07.137180 kubelet[2004]: E1002 19:32:07.137145 2004 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:32:07.232872 kubelet[2004]: E1002 19:32:07.232842 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:08.901063 systemd[1]: Started sshd@14-10.0.0.8:22-10.0.0.1:41780.service. Oct 2 19:32:08.901000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.8:22-10.0.0.1:41780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:08.904610 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:32:08.904689 kernel: audit: type=1130 audit(1696275128.901:1143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.8:22-10.0.0.1:41780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:08.945000 audit[2676]: USER_ACCT pid=2676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:08.945498 sshd[2676]: Accepted publickey for core from 10.0.0.1 port 41780 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:32:08.947014 sshd[2676]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:32:08.946000 audit[2676]: CRED_ACQ pid=2676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:08.950817 systemd-logind[1131]: New session 15 of user core. Oct 2 19:32:08.951274 systemd[1]: Started session-15.scope. Oct 2 19:32:08.951558 kernel: audit: type=1101 audit(1696275128.945:1144): pid=2676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:08.951598 kernel: audit: type=1103 audit(1696275128.946:1145): pid=2676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:08.951616 kernel: audit: type=1006 audit(1696275128.946:1146): pid=2676 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:32:08.946000 audit[2676]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6712820 a2=3 a3=1 items=0 ppid=1 pid=2676 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:08.957173 kernel: audit: type=1300 audit(1696275128.946:1146): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6712820 a2=3 a3=1 items=0 ppid=1 pid=2676 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:08.957245 kernel: audit: type=1327 audit(1696275128.946:1146): proctitle=737368643A20636F7265205B707269765D Oct 2 19:32:08.946000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:32:08.955000 audit[2676]: USER_START pid=2676 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:08.961835 kernel: audit: type=1105 audit(1696275128.955:1147): pid=2676 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:08.961898 kernel: audit: type=1103 audit(1696275128.957:1148): pid=2678 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:08.957000 audit[2678]: CRED_ACQ pid=2678 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:09.070920 sshd[2676]: pam_unix(sshd:session): session closed for user core Oct 2 19:32:09.072000 audit[2676]: USER_END pid=2676 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:09.074862 systemd-logind[1131]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:32:09.074875 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:32:09.075414 systemd[1]: sshd@14-10.0.0.8:22-10.0.0.1:41780.service: Deactivated successfully. Oct 2 19:32:09.076506 systemd-logind[1131]: Removed session 15. Oct 2 19:32:09.073000 audit[2676]: CRED_DISP pid=2676 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:09.080088 kernel: audit: type=1106 audit(1696275129.072:1149): pid=2676 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:09.080172 kernel: audit: type=1104 audit(1696275129.073:1150): pid=2676 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:09.075000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.8:22-10.0.0.1:41780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:10.147998 kubelet[2004]: E1002 19:32:10.147945 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:10.150064 env[1141]: time="2023-10-02T19:32:10.150011180Z" level=info msg="CreateContainer within sandbox \"9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:32:10.161718 env[1141]: time="2023-10-02T19:32:10.161675409Z" level=info msg="CreateContainer within sandbox \"9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116\"" Oct 2 19:32:10.162880 env[1141]: time="2023-10-02T19:32:10.162853053Z" level=info msg="StartContainer for \"318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116\"" Oct 2 19:32:10.185025 systemd[1]: Started cri-containerd-318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116.scope. Oct 2 19:32:10.240412 systemd[1]: cri-containerd-318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116.scope: Deactivated successfully. Oct 2 19:32:10.245155 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116-rootfs.mount: Deactivated successfully. Oct 2 19:32:10.252869 env[1141]: time="2023-10-02T19:32:10.252814683Z" level=info msg="shim disconnected" id=318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116 Oct 2 19:32:10.252869 env[1141]: time="2023-10-02T19:32:10.252864563Z" level=warning msg="cleaning up after shim disconnected" id=318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116 namespace=k8s.io Oct 2 19:32:10.252869 env[1141]: time="2023-10-02T19:32:10.252874163Z" level=info msg="cleaning up dead shim" Oct 2 19:32:10.260627 env[1141]: time="2023-10-02T19:32:10.260582143Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:32:10Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2713 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:32:10Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:32:10.260877 env[1141]: time="2023-10-02T19:32:10.260826264Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 19:32:10.261176 env[1141]: time="2023-10-02T19:32:10.261127104Z" level=error msg="Failed to pipe stderr of container \"318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116\"" error="reading from a closed fifo" Oct 2 19:32:10.261246 env[1141]: time="2023-10-02T19:32:10.261206705Z" level=error msg="Failed to pipe stdout of container \"318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116\"" error="reading from a closed fifo" Oct 2 19:32:10.262673 env[1141]: time="2023-10-02T19:32:10.262595028Z" level=error msg="StartContainer for \"318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:32:10.263061 kubelet[2004]: E1002 19:32:10.262889 2004 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116" Oct 2 19:32:10.263061 kubelet[2004]: E1002 19:32:10.263005 2004 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:32:10.263061 kubelet[2004]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:32:10.263061 kubelet[2004]: rm /hostbin/cilium-mount Oct 2 19:32:10.263061 kubelet[2004]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ccrx5,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:32:10.263061 kubelet[2004]: E1002 19:32:10.263040 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-sj7vg" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e Oct 2 19:32:10.415953 kubelet[2004]: I1002 19:32:10.415858 2004 scope.go:115] "RemoveContainer" containerID="eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8" Oct 2 19:32:10.416269 kubelet[2004]: I1002 19:32:10.416242 2004 scope.go:115] "RemoveContainer" containerID="eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8" Oct 2 19:32:10.418203 env[1141]: time="2023-10-02T19:32:10.418068267Z" level=info msg="RemoveContainer for \"eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8\"" Oct 2 19:32:10.419073 env[1141]: time="2023-10-02T19:32:10.419043589Z" level=info msg="RemoveContainer for \"eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8\"" Oct 2 19:32:10.419221 env[1141]: time="2023-10-02T19:32:10.419171229Z" level=error msg="RemoveContainer for \"eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8\" failed" error="failed to set removing state for container \"eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8\": container is already in removing state" Oct 2 19:32:10.419492 kubelet[2004]: E1002 19:32:10.419463 2004 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8\": container is already in removing state" containerID="eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8" Oct 2 19:32:10.419609 kubelet[2004]: E1002 19:32:10.419592 2004 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8": container is already in removing state; Skipping pod "cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e)" Oct 2 19:32:10.419848 kubelet[2004]: E1002 19:32:10.419743 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:10.420404 kubelet[2004]: E1002 19:32:10.420364 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e)\"" pod="kube-system/cilium-sj7vg" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e Oct 2 19:32:10.421672 env[1141]: time="2023-10-02T19:32:10.421638276Z" level=info msg="RemoveContainer for \"eabf4ab1eda7c6c50c1856369aad497e585b36aff85736e618adcacdf33f2ea8\" returns successfully" Oct 2 19:32:12.234687 kubelet[2004]: E1002 19:32:12.234650 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:13.358991 kubelet[2004]: W1002 19:32:13.358934 2004 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod34b8cc7b_5768_41e5_9c5b_122435a1fb3e.slice/cri-containerd-318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116.scope WatchSource:0}: task 318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116 not found: not found Oct 2 19:32:17.235546 kubelet[2004]: E1002 19:32:17.235515 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:19.074137 systemd[1]: Started sshd@15-10.0.0.8:22-10.0.0.1:51704.service. Oct 2 19:32:19.074000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.8:22-10.0.0.1:51704 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:19.078141 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:32:19.078242 kernel: audit: type=1130 audit(1696275139.074:1152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.8:22-10.0.0.1:51704 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:19.118000 audit[2726]: USER_ACCT pid=2726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:19.119175 sshd[2726]: Accepted publickey for core from 10.0.0.1 port 51704 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:32:19.120404 sshd[2726]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:32:19.119000 audit[2726]: CRED_ACQ pid=2726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:19.124082 systemd-logind[1131]: New session 16 of user core. Oct 2 19:32:19.124939 systemd[1]: Started session-16.scope. Oct 2 19:32:19.125396 kernel: audit: type=1101 audit(1696275139.118:1153): pid=2726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:19.125468 kernel: audit: type=1103 audit(1696275139.119:1154): pid=2726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:19.127668 kernel: audit: type=1006 audit(1696275139.119:1155): pid=2726 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:32:19.127774 kernel: audit: type=1300 audit(1696275139.119:1155): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2c51660 a2=3 a3=1 items=0 ppid=1 pid=2726 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:19.119000 audit[2726]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2c51660 a2=3 a3=1 items=0 ppid=1 pid=2726 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:19.119000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:32:19.132245 kernel: audit: type=1327 audit(1696275139.119:1155): proctitle=737368643A20636F7265205B707269765D Oct 2 19:32:19.128000 audit[2726]: USER_START pid=2726 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:19.135704 kernel: audit: type=1105 audit(1696275139.128:1156): pid=2726 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:19.135770 kernel: audit: type=1103 audit(1696275139.129:1157): pid=2728 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:19.129000 audit[2728]: CRED_ACQ pid=2728 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:19.219000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:19.219000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40002b9160 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:32:19.227127 kernel: audit: type=1400 audit(1696275139.219:1158): avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:19.227203 kernel: audit: type=1300 audit(1696275139.219:1158): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40002b9160 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:32:19.219000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:19.220000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:19.220000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d48fe0 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:32:19.220000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:19.220000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:19.220000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d49000 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:32:19.220000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:19.221000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:19.221000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40002b9180 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:32:19.221000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:19.244256 sshd[2726]: pam_unix(sshd:session): session closed for user core Oct 2 19:32:19.245000 audit[2726]: USER_END pid=2726 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:19.245000 audit[2726]: CRED_DISP pid=2726 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:19.247374 systemd[1]: sshd@15-10.0.0.8:22-10.0.0.1:51704.service: Deactivated successfully. Oct 2 19:32:19.247000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.8:22-10.0.0.1:51704 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:19.248178 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:32:19.248837 systemd-logind[1131]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:32:19.250269 systemd-logind[1131]: Removed session 16. Oct 2 19:32:22.237281 kubelet[2004]: E1002 19:32:22.237248 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:26.148203 kubelet[2004]: E1002 19:32:26.148164 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:26.148525 kubelet[2004]: E1002 19:32:26.148385 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e)\"" pod="kube-system/cilium-sj7vg" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e Oct 2 19:32:27.238756 kubelet[2004]: E1002 19:32:27.238729 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:29.249470 systemd[1]: Started sshd@16-10.0.0.8:22-10.0.0.1:42842.service. Oct 2 19:32:29.249000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.8:22-10.0.0.1:42842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:29.250683 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:32:29.250733 kernel: audit: type=1130 audit(1696275149.249:1165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.8:22-10.0.0.1:42842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:29.293000 audit[2742]: USER_ACCT pid=2742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:29.294291 sshd[2742]: Accepted publickey for core from 10.0.0.1 port 42842 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:32:29.295796 sshd[2742]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:32:29.295000 audit[2742]: CRED_ACQ pid=2742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:29.299680 kernel: audit: type=1101 audit(1696275149.293:1166): pid=2742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:29.299751 kernel: audit: type=1103 audit(1696275149.295:1167): pid=2742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:29.299771 kernel: audit: type=1006 audit(1696275149.295:1168): pid=2742 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:32:29.295000 audit[2742]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0d48b30 a2=3 a3=1 items=0 ppid=1 pid=2742 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:29.305119 kernel: audit: type=1300 audit(1696275149.295:1168): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0d48b30 a2=3 a3=1 items=0 ppid=1 pid=2742 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:29.305298 kernel: audit: type=1327 audit(1696275149.295:1168): proctitle=737368643A20636F7265205B707269765D Oct 2 19:32:29.295000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:32:29.310077 systemd-logind[1131]: New session 17 of user core. Oct 2 19:32:29.310947 systemd[1]: Started session-17.scope. Oct 2 19:32:29.320000 audit[2742]: USER_START pid=2742 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:29.321000 audit[2744]: CRED_ACQ pid=2744 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:29.326745 kernel: audit: type=1105 audit(1696275149.320:1169): pid=2742 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:29.326802 kernel: audit: type=1103 audit(1696275149.321:1170): pid=2744 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:29.447333 sshd[2742]: pam_unix(sshd:session): session closed for user core Oct 2 19:32:29.449000 audit[2742]: USER_END pid=2742 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:29.451550 systemd[1]: Started sshd@17-10.0.0.8:22-10.0.0.1:42856.service. Oct 2 19:32:29.449000 audit[2742]: CRED_DISP pid=2742 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:29.454036 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:32:29.454631 systemd[1]: sshd@16-10.0.0.8:22-10.0.0.1:42842.service: Deactivated successfully. Oct 2 19:32:29.457032 kernel: audit: type=1106 audit(1696275149.449:1171): pid=2742 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:29.457117 kernel: audit: type=1104 audit(1696275149.449:1172): pid=2742 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:29.451000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.8:22-10.0.0.1:42856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:29.454000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.8:22-10.0.0.1:42842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:29.458040 systemd-logind[1131]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:32:29.458850 systemd-logind[1131]: Removed session 17. Oct 2 19:32:29.496000 audit[2755]: USER_ACCT pid=2755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:29.496353 sshd[2755]: Accepted publickey for core from 10.0.0.1 port 42856 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:32:29.497000 audit[2755]: CRED_ACQ pid=2755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:29.497000 audit[2755]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc15df930 a2=3 a3=1 items=0 ppid=1 pid=2755 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:29.497000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:32:29.497569 sshd[2755]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:32:29.500997 systemd-logind[1131]: New session 18 of user core. Oct 2 19:32:29.501932 systemd[1]: Started session-18.scope. Oct 2 19:32:29.505000 audit[2755]: USER_START pid=2755 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:29.507000 audit[2758]: CRED_ACQ pid=2758 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:30.258161 sshd[2755]: pam_unix(sshd:session): session closed for user core Oct 2 19:32:30.260056 systemd[1]: Started sshd@18-10.0.0.8:22-10.0.0.1:42864.service. Oct 2 19:32:30.260000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.8:22-10.0.0.1:42864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:30.265000 audit[2755]: USER_END pid=2755 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:30.265000 audit[2755]: CRED_DISP pid=2755 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:30.268573 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:32:30.269332 systemd-logind[1131]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:32:30.269575 systemd[1]: sshd@17-10.0.0.8:22-10.0.0.1:42856.service: Deactivated successfully. Oct 2 19:32:30.269000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.8:22-10.0.0.1:42856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:30.271389 systemd-logind[1131]: Removed session 18. Oct 2 19:32:30.312000 audit[2767]: USER_ACCT pid=2767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:30.312337 sshd[2767]: Accepted publickey for core from 10.0.0.1 port 42864 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:32:30.313000 audit[2767]: CRED_ACQ pid=2767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:30.313000 audit[2767]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc54ab660 a2=3 a3=1 items=0 ppid=1 pid=2767 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:30.313000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:32:30.313559 sshd[2767]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:32:30.316687 systemd-logind[1131]: New session 19 of user core. Oct 2 19:32:30.317652 systemd[1]: Started session-19.scope. Oct 2 19:32:30.320000 audit[2767]: USER_START pid=2767 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:30.322000 audit[2770]: CRED_ACQ pid=2770 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:30.439032 sshd[2767]: pam_unix(sshd:session): session closed for user core Oct 2 19:32:30.439000 audit[2767]: USER_END pid=2767 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:30.439000 audit[2767]: CRED_DISP pid=2767 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:30.441604 systemd[1]: sshd@18-10.0.0.8:22-10.0.0.1:42864.service: Deactivated successfully. Oct 2 19:32:30.441000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.8:22-10.0.0.1:42864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:30.442516 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:32:30.443068 systemd-logind[1131]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:32:30.443968 systemd-logind[1131]: Removed session 19. Oct 2 19:32:32.240238 kubelet[2004]: E1002 19:32:32.240204 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:37.241490 kubelet[2004]: E1002 19:32:37.241410 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:39.148447 kubelet[2004]: E1002 19:32:39.148403 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:39.148804 kubelet[2004]: E1002 19:32:39.148638 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e)\"" pod="kube-system/cilium-sj7vg" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e Oct 2 19:32:40.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.8:22-10.0.0.1:51718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:40.443293 systemd[1]: Started sshd@19-10.0.0.8:22-10.0.0.1:51718.service. Oct 2 19:32:40.448165 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:32:40.448270 kernel: audit: type=1130 audit(1696275160.443:1192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.8:22-10.0.0.1:51718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:40.501000 audit[2783]: USER_ACCT pid=2783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:40.501685 sshd[2783]: Accepted publickey for core from 10.0.0.1 port 51718 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:32:40.502914 sshd[2783]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:32:40.502000 audit[2783]: CRED_ACQ pid=2783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:40.507324 systemd[1]: Started session-20.scope. Oct 2 19:32:40.507633 systemd-logind[1131]: New session 20 of user core. Oct 2 19:32:40.513584 kernel: audit: type=1101 audit(1696275160.501:1193): pid=2783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:40.513627 kernel: audit: type=1103 audit(1696275160.502:1194): pid=2783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:40.513647 kernel: audit: type=1006 audit(1696275160.502:1195): pid=2783 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:32:40.515349 kernel: audit: type=1300 audit(1696275160.502:1195): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9fd46b0 a2=3 a3=1 items=0 ppid=1 pid=2783 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:40.502000 audit[2783]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9fd46b0 a2=3 a3=1 items=0 ppid=1 pid=2783 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:40.502000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:32:40.519380 kernel: audit: type=1327 audit(1696275160.502:1195): proctitle=737368643A20636F7265205B707269765D Oct 2 19:32:40.522000 audit[2783]: USER_START pid=2783 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:40.524000 audit[2785]: CRED_ACQ pid=2785 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:40.529120 kernel: audit: type=1105 audit(1696275160.522:1196): pid=2783 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:40.529163 kernel: audit: type=1103 audit(1696275160.524:1197): pid=2785 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:40.657747 sshd[2783]: pam_unix(sshd:session): session closed for user core Oct 2 19:32:40.658000 audit[2783]: USER_END pid=2783 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:40.660215 systemd[1]: sshd@19-10.0.0.8:22-10.0.0.1:51718.service: Deactivated successfully. Oct 2 19:32:40.660928 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:32:40.661622 systemd-logind[1131]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:32:40.658000 audit[2783]: CRED_DISP pid=2783 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:40.662378 systemd-logind[1131]: Removed session 20. Oct 2 19:32:40.665279 kernel: audit: type=1106 audit(1696275160.658:1198): pid=2783 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:40.665348 kernel: audit: type=1104 audit(1696275160.658:1199): pid=2783 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:40.658000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.8:22-10.0.0.1:51718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:42.242755 kubelet[2004]: E1002 19:32:42.242712 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:47.148524 kubelet[2004]: E1002 19:32:47.148485 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:47.243575 kubelet[2004]: E1002 19:32:47.243539 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:48.148083 kubelet[2004]: E1002 19:32:48.148042 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:50.662000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.8:22-10.0.0.1:44812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:50.662428 systemd[1]: Started sshd@20-10.0.0.8:22-10.0.0.1:44812.service. Oct 2 19:32:50.663563 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:32:50.663805 kernel: audit: type=1130 audit(1696275170.662:1201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.8:22-10.0.0.1:44812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:50.708000 audit[2796]: USER_ACCT pid=2796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:50.708589 sshd[2796]: Accepted publickey for core from 10.0.0.1 port 44812 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:32:50.709744 sshd[2796]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:32:50.709000 audit[2796]: CRED_ACQ pid=2796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:50.713468 systemd-logind[1131]: New session 21 of user core. Oct 2 19:32:50.714549 kernel: audit: type=1101 audit(1696275170.708:1202): pid=2796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:50.714585 kernel: audit: type=1103 audit(1696275170.709:1203): pid=2796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:50.714193 systemd[1]: Started session-21.scope. Oct 2 19:32:50.716779 kernel: audit: type=1006 audit(1696275170.709:1204): pid=2796 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:32:50.709000 audit[2796]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3f12f30 a2=3 a3=1 items=0 ppid=1 pid=2796 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:50.720554 kernel: audit: type=1300 audit(1696275170.709:1204): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3f12f30 a2=3 a3=1 items=0 ppid=1 pid=2796 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:50.709000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:32:50.722132 kernel: audit: type=1327 audit(1696275170.709:1204): proctitle=737368643A20636F7265205B707269765D Oct 2 19:32:50.722287 kernel: audit: type=1105 audit(1696275170.721:1205): pid=2796 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:50.721000 audit[2796]: USER_START pid=2796 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:50.728711 kernel: audit: type=1103 audit(1696275170.722:1206): pid=2798 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:50.722000 audit[2798]: CRED_ACQ pid=2798 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:50.837556 sshd[2796]: pam_unix(sshd:session): session closed for user core Oct 2 19:32:50.838000 audit[2796]: USER_END pid=2796 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:50.840536 systemd[1]: sshd@20-10.0.0.8:22-10.0.0.1:44812.service: Deactivated successfully. Oct 2 19:32:50.841667 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:32:50.838000 audit[2796]: CRED_DISP pid=2796 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:50.842789 systemd-logind[1131]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:32:50.843630 systemd-logind[1131]: Removed session 21. Oct 2 19:32:50.845412 kernel: audit: type=1106 audit(1696275170.838:1207): pid=2796 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:50.845485 kernel: audit: type=1104 audit(1696275170.838:1208): pid=2796 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:50.838000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.8:22-10.0.0.1:44812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:51.148898 kubelet[2004]: E1002 19:32:51.148860 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:51.149536 kubelet[2004]: E1002 19:32:51.149506 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e)\"" pod="kube-system/cilium-sj7vg" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e Oct 2 19:32:52.245135 kubelet[2004]: E1002 19:32:52.245087 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:56.147747 kubelet[2004]: E1002 19:32:56.147702 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:57.246281 kubelet[2004]: E1002 19:32:57.246252 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:58.148470 kubelet[2004]: E1002 19:32:58.148080 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:33:00.148544 kubelet[2004]: E1002 19:33:00.148510 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:33:00.842890 systemd[1]: Started sshd@21-10.0.0.8:22-10.0.0.1:39298.service. Oct 2 19:33:00.842000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.8:22-10.0.0.1:39298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:00.846616 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:33:00.846753 kernel: audit: type=1130 audit(1696275180.842:1210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.8:22-10.0.0.1:39298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:00.886000 audit[2811]: USER_ACCT pid=2811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:00.887047 sshd[2811]: Accepted publickey for core from 10.0.0.1 port 39298 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:33:00.888253 sshd[2811]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:00.887000 audit[2811]: CRED_ACQ pid=2811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:00.893576 kernel: audit: type=1101 audit(1696275180.886:1211): pid=2811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:00.893712 kernel: audit: type=1103 audit(1696275180.887:1212): pid=2811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:00.893740 kernel: audit: type=1006 audit(1696275180.887:1213): pid=2811 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 19:33:00.893183 systemd-logind[1131]: New session 22 of user core. Oct 2 19:33:00.893983 systemd[1]: Started session-22.scope. Oct 2 19:33:00.887000 audit[2811]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3a3a5f0 a2=3 a3=1 items=0 ppid=1 pid=2811 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:00.899872 kernel: audit: type=1300 audit(1696275180.887:1213): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3a3a5f0 a2=3 a3=1 items=0 ppid=1 pid=2811 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:00.887000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:00.901746 kernel: audit: type=1327 audit(1696275180.887:1213): proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:00.901815 kernel: audit: type=1105 audit(1696275180.898:1214): pid=2811 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:00.898000 audit[2811]: USER_START pid=2811 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:00.900000 audit[2813]: CRED_ACQ pid=2813 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:00.908276 kernel: audit: type=1103 audit(1696275180.900:1215): pid=2813 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:01.011800 sshd[2811]: pam_unix(sshd:session): session closed for user core Oct 2 19:33:01.012000 audit[2811]: USER_END pid=2811 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:01.014772 systemd[1]: sshd@21-10.0.0.8:22-10.0.0.1:39298.service: Deactivated successfully. Oct 2 19:33:01.015686 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:33:01.012000 audit[2811]: CRED_DISP pid=2811 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:01.016381 systemd-logind[1131]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:33:01.017333 systemd-logind[1131]: Removed session 22. Oct 2 19:33:01.019405 kernel: audit: type=1106 audit(1696275181.012:1216): pid=2811 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:01.019488 kernel: audit: type=1104 audit(1696275181.012:1217): pid=2811 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:01.014000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.8:22-10.0.0.1:39298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:02.247476 kubelet[2004]: E1002 19:33:02.247448 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:33:03.764000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:03.764000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400159be80 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:33:03.764000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:03.765000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:03.765000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f486f0 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:33:03.765000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:04.037000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:04.037000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4010123b90 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:33:04.037000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:33:04.037000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:04.037000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4009dfe500 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:33:04.037000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:33:04.041000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:04.041000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=401070c3f0 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:33:04.041000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:33:04.050000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6811 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:04.050000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4010123bf0 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:33:04.050000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:33:04.058000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:04.058000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:04.058000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40105b30b0 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:33:04.058000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:33:04.058000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4009df25a0 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:33:04.058000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:33:04.147869 kubelet[2004]: E1002 19:33:04.147817 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:33:04.148531 kubelet[2004]: E1002 19:33:04.148048 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e)\"" pod="kube-system/cilium-sj7vg" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e Oct 2 19:33:07.249123 kubelet[2004]: E1002 19:33:07.249071 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:33:11.016000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.8:22-10.0.0.1:42596 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:11.016734 systemd[1]: Started sshd@22-10.0.0.8:22-10.0.0.1:42596.service. Oct 2 19:33:11.017708 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:33:11.017779 kernel: audit: type=1130 audit(1696275191.016:1227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.8:22-10.0.0.1:42596 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:11.060926 sshd[2826]: Accepted publickey for core from 10.0.0.1 port 42596 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:33:11.060000 audit[2826]: USER_ACCT pid=2826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:11.062949 sshd[2826]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:11.061000 audit[2826]: CRED_ACQ pid=2826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:11.067172 systemd-logind[1131]: New session 23 of user core. Oct 2 19:33:11.067445 kernel: audit: type=1101 audit(1696275191.060:1228): pid=2826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:11.067485 kernel: audit: type=1103 audit(1696275191.061:1229): pid=2826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:11.067501 kernel: audit: type=1006 audit(1696275191.061:1230): pid=2826 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:33:11.067950 systemd[1]: Started session-23.scope. Oct 2 19:33:11.069267 kernel: audit: type=1300 audit(1696275191.061:1230): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd90214a0 a2=3 a3=1 items=0 ppid=1 pid=2826 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:11.061000 audit[2826]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd90214a0 a2=3 a3=1 items=0 ppid=1 pid=2826 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:11.061000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:11.073540 kernel: audit: type=1327 audit(1696275191.061:1230): proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:11.075005 kernel: audit: type=1105 audit(1696275191.070:1231): pid=2826 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:11.070000 audit[2826]: USER_START pid=2826 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:11.073000 audit[2828]: CRED_ACQ pid=2828 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:11.080795 kernel: audit: type=1103 audit(1696275191.073:1232): pid=2828 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:11.189625 sshd[2826]: pam_unix(sshd:session): session closed for user core Oct 2 19:33:11.189000 audit[2826]: USER_END pid=2826 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:11.192693 systemd-logind[1131]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:33:11.192839 systemd[1]: sshd@22-10.0.0.8:22-10.0.0.1:42596.service: Deactivated successfully. Oct 2 19:33:11.193685 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:33:11.194484 systemd-logind[1131]: Removed session 23. Oct 2 19:33:11.189000 audit[2826]: CRED_DISP pid=2826 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:11.197505 kernel: audit: type=1106 audit(1696275191.189:1233): pid=2826 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:11.197600 kernel: audit: type=1104 audit(1696275191.189:1234): pid=2826 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:11.192000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.8:22-10.0.0.1:42596 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:12.250405 kubelet[2004]: E1002 19:33:12.250353 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:33:17.251617 kubelet[2004]: E1002 19:33:17.251470 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:33:19.148440 kubelet[2004]: E1002 19:33:19.148404 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:33:19.148772 kubelet[2004]: E1002 19:33:19.148619 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e)\"" pod="kube-system/cilium-sj7vg" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e Oct 2 19:33:19.220000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:19.223769 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:33:19.223870 kernel: audit: type=1400 audit(1696275199.220:1236): avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:19.223892 kernel: audit: type=1300 audit(1696275199.220:1236): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c1f6a0 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:33:19.220000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c1f6a0 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:33:19.220000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:19.231215 kernel: audit: type=1327 audit(1696275199.220:1236): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:19.231320 kernel: audit: type=1400 audit(1696275199.220:1237): avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:19.220000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:19.220000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000840e20 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:33:19.238213 kernel: audit: type=1300 audit(1696275199.220:1237): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000840e20 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:33:19.238278 kernel: audit: type=1327 audit(1696275199.220:1237): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:19.220000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:19.220000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:19.244448 kernel: audit: type=1400 audit(1696275199.220:1238): avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:19.244527 kernel: audit: type=1300 audit(1696275199.220:1238): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a06720 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:33:19.220000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a06720 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:33:19.220000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:19.251581 kernel: audit: type=1327 audit(1696275199.220:1238): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:19.251653 kernel: audit: type=1400 audit(1696275199.220:1239): avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:19.220000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:19.220000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400167e0e0 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:33:19.220000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:21.194580 systemd[1]: Started sshd@23-10.0.0.8:22-10.0.0.1:46210.service. Oct 2 19:33:21.193000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.8:22-10.0.0.1:46210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:21.240000 audit[2839]: USER_ACCT pid=2839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:21.241463 sshd[2839]: Accepted publickey for core from 10.0.0.1 port 46210 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:33:21.241000 audit[2839]: CRED_ACQ pid=2839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:21.241000 audit[2839]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc5bab6e0 a2=3 a3=1 items=0 ppid=1 pid=2839 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:21.241000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:21.242700 sshd[2839]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:21.247092 systemd[1]: Started session-24.scope. Oct 2 19:33:21.247488 systemd-logind[1131]: New session 24 of user core. Oct 2 19:33:21.251000 audit[2839]: USER_START pid=2839 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:21.252000 audit[2841]: CRED_ACQ pid=2841 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:21.392836 sshd[2839]: pam_unix(sshd:session): session closed for user core Oct 2 19:33:21.392000 audit[2839]: USER_END pid=2839 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:21.392000 audit[2839]: CRED_DISP pid=2839 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:21.395680 systemd[1]: sshd@23-10.0.0.8:22-10.0.0.1:46210.service: Deactivated successfully. Oct 2 19:33:21.394000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.8:22-10.0.0.1:46210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:21.396575 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:33:21.397207 systemd-logind[1131]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:33:21.397921 systemd-logind[1131]: Removed session 24. Oct 2 19:33:22.252271 kubelet[2004]: E1002 19:33:22.252225 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:33:27.253235 kubelet[2004]: E1002 19:33:27.253195 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:33:31.397918 systemd[1]: Started sshd@24-10.0.0.8:22-10.0.0.1:58654.service. Oct 2 19:33:31.397000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.8:22-10.0.0.1:58654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:31.401713 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:33:31.401822 kernel: audit: type=1130 audit(1696275211.397:1249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.8:22-10.0.0.1:58654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:31.440000 audit[2854]: USER_ACCT pid=2854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:31.442017 sshd[2854]: Accepted publickey for core from 10.0.0.1 port 58654 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:33:31.443286 sshd[2854]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:31.441000 audit[2854]: CRED_ACQ pid=2854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:31.447196 systemd-logind[1131]: New session 25 of user core. Oct 2 19:33:31.447660 systemd[1]: Started session-25.scope. Oct 2 19:33:31.448333 kernel: audit: type=1101 audit(1696275211.440:1250): pid=2854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:31.448412 kernel: audit: type=1103 audit(1696275211.441:1251): pid=2854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:31.448435 kernel: audit: type=1006 audit(1696275211.441:1252): pid=2854 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:33:31.441000 audit[2854]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc799cc0 a2=3 a3=1 items=0 ppid=1 pid=2854 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:31.452986 kernel: audit: type=1300 audit(1696275211.441:1252): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc799cc0 a2=3 a3=1 items=0 ppid=1 pid=2854 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:31.453062 kernel: audit: type=1327 audit(1696275211.441:1252): proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:31.441000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:31.451000 audit[2854]: USER_START pid=2854 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:31.457633 kernel: audit: type=1105 audit(1696275211.451:1253): pid=2854 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:31.457715 kernel: audit: type=1103 audit(1696275211.452:1254): pid=2856 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:31.452000 audit[2856]: CRED_ACQ pid=2856 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:31.565681 sshd[2854]: pam_unix(sshd:session): session closed for user core Oct 2 19:33:31.565000 audit[2854]: USER_END pid=2854 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:31.568763 systemd[1]: sshd@24-10.0.0.8:22-10.0.0.1:58654.service: Deactivated successfully. Oct 2 19:33:31.569586 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:33:31.565000 audit[2854]: CRED_DISP pid=2854 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:31.570141 systemd-logind[1131]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:33:31.571044 systemd-logind[1131]: Removed session 25. Oct 2 19:33:31.573058 kernel: audit: type=1106 audit(1696275211.565:1255): pid=2854 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:31.573164 kernel: audit: type=1104 audit(1696275211.565:1256): pid=2854 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:31.567000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.8:22-10.0.0.1:58654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:32.254666 kubelet[2004]: E1002 19:33:32.254624 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:33:34.147696 kubelet[2004]: E1002 19:33:34.147661 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:33:34.150421 env[1141]: time="2023-10-02T19:33:34.150375236Z" level=info msg="CreateContainer within sandbox \"9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:33:34.161160 env[1141]: time="2023-10-02T19:33:34.161090909Z" level=info msg="CreateContainer within sandbox \"9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"61b056c1b52aae127dd961b1475af5d6dc234cb2f6a7f3a99129667ea2b4c63f\"" Oct 2 19:33:34.161819 env[1141]: time="2023-10-02T19:33:34.161775394Z" level=info msg="StartContainer for \"61b056c1b52aae127dd961b1475af5d6dc234cb2f6a7f3a99129667ea2b4c63f\"" Oct 2 19:33:34.181128 systemd[1]: Started cri-containerd-61b056c1b52aae127dd961b1475af5d6dc234cb2f6a7f3a99129667ea2b4c63f.scope. Oct 2 19:33:34.224610 systemd[1]: cri-containerd-61b056c1b52aae127dd961b1475af5d6dc234cb2f6a7f3a99129667ea2b4c63f.scope: Deactivated successfully. Oct 2 19:33:34.228656 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-61b056c1b52aae127dd961b1475af5d6dc234cb2f6a7f3a99129667ea2b4c63f-rootfs.mount: Deactivated successfully. Oct 2 19:33:34.234371 env[1141]: time="2023-10-02T19:33:34.234311008Z" level=info msg="shim disconnected" id=61b056c1b52aae127dd961b1475af5d6dc234cb2f6a7f3a99129667ea2b4c63f Oct 2 19:33:34.234621 env[1141]: time="2023-10-02T19:33:34.234597690Z" level=warning msg="cleaning up after shim disconnected" id=61b056c1b52aae127dd961b1475af5d6dc234cb2f6a7f3a99129667ea2b4c63f namespace=k8s.io Oct 2 19:33:34.234683 env[1141]: time="2023-10-02T19:33:34.234671291Z" level=info msg="cleaning up dead shim" Oct 2 19:33:34.244435 env[1141]: time="2023-10-02T19:33:34.244384037Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:33:34Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2890 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:33:34Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/61b056c1b52aae127dd961b1475af5d6dc234cb2f6a7f3a99129667ea2b4c63f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:33:34.244869 env[1141]: time="2023-10-02T19:33:34.244811000Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 19:33:34.245071 env[1141]: time="2023-10-02T19:33:34.245024201Z" level=error msg="Failed to pipe stdout of container \"61b056c1b52aae127dd961b1475af5d6dc234cb2f6a7f3a99129667ea2b4c63f\"" error="reading from a closed fifo" Oct 2 19:33:34.245205 env[1141]: time="2023-10-02T19:33:34.245172562Z" level=error msg="Failed to pipe stderr of container \"61b056c1b52aae127dd961b1475af5d6dc234cb2f6a7f3a99129667ea2b4c63f\"" error="reading from a closed fifo" Oct 2 19:33:34.246830 env[1141]: time="2023-10-02T19:33:34.246767653Z" level=error msg="StartContainer for \"61b056c1b52aae127dd961b1475af5d6dc234cb2f6a7f3a99129667ea2b4c63f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:33:34.247300 kubelet[2004]: E1002 19:33:34.247084 2004 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="61b056c1b52aae127dd961b1475af5d6dc234cb2f6a7f3a99129667ea2b4c63f" Oct 2 19:33:34.247300 kubelet[2004]: E1002 19:33:34.247239 2004 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:33:34.247300 kubelet[2004]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:33:34.247300 kubelet[2004]: rm /hostbin/cilium-mount Oct 2 19:33:34.247300 kubelet[2004]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ccrx5,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:33:34.247300 kubelet[2004]: E1002 19:33:34.247278 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-sj7vg" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e Oct 2 19:33:34.572616 kubelet[2004]: I1002 19:33:34.572584 2004 scope.go:115] "RemoveContainer" containerID="318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116" Oct 2 19:33:34.572936 kubelet[2004]: I1002 19:33:34.572923 2004 scope.go:115] "RemoveContainer" containerID="318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116" Oct 2 19:33:34.575218 env[1141]: time="2023-10-02T19:33:34.575175932Z" level=info msg="RemoveContainer for \"318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116\"" Oct 2 19:33:34.575414 env[1141]: time="2023-10-02T19:33:34.575387174Z" level=info msg="RemoveContainer for \"318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116\"" Oct 2 19:33:34.575637 env[1141]: time="2023-10-02T19:33:34.575601335Z" level=error msg="RemoveContainer for \"318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116\" failed" error="failed to set removing state for container \"318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116\": container is already in removing state" Oct 2 19:33:34.575892 kubelet[2004]: E1002 19:33:34.575849 2004 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116\": container is already in removing state" containerID="318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116" Oct 2 19:33:34.575892 kubelet[2004]: E1002 19:33:34.575892 2004 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116": container is already in removing state; Skipping pod "cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e)" Oct 2 19:33:34.575983 kubelet[2004]: E1002 19:33:34.575963 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:33:34.576218 kubelet[2004]: E1002 19:33:34.576205 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e)\"" pod="kube-system/cilium-sj7vg" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e Oct 2 19:33:34.578487 env[1141]: time="2023-10-02T19:33:34.578447275Z" level=info msg="RemoveContainer for \"318c1c9984c8a97e06643f44db9afb19278ae9b20730554161ee3ff50932a116\" returns successfully" Oct 2 19:33:37.263439 kubelet[2004]: E1002 19:33:37.259741 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:33:37.339357 kubelet[2004]: W1002 19:33:37.339308 2004 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod34b8cc7b_5768_41e5_9c5b_122435a1fb3e.slice/cri-containerd-61b056c1b52aae127dd961b1475af5d6dc234cb2f6a7f3a99129667ea2b4c63f.scope WatchSource:0}: task 61b056c1b52aae127dd961b1475af5d6dc234cb2f6a7f3a99129667ea2b4c63f not found: not found Oct 2 19:33:41.569731 systemd[1]: Started sshd@25-10.0.0.8:22-10.0.0.1:44250.service. Oct 2 19:33:41.568000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.8:22-10.0.0.1:44250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:41.570896 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:33:41.570970 kernel: audit: type=1130 audit(1696275221.568:1258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.8:22-10.0.0.1:44250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:41.613000 audit[2904]: USER_ACCT pid=2904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:41.614856 sshd[2904]: Accepted publickey for core from 10.0.0.1 port 44250 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:33:41.616501 sshd[2904]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:41.615000 audit[2904]: CRED_ACQ pid=2904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:41.620433 systemd-logind[1131]: New session 26 of user core. Oct 2 19:33:41.621076 kernel: audit: type=1101 audit(1696275221.613:1259): pid=2904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:41.621147 kernel: audit: type=1103 audit(1696275221.615:1260): pid=2904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:41.621172 kernel: audit: type=1006 audit(1696275221.615:1261): pid=2904 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:33:41.621027 systemd[1]: Started session-26.scope. Oct 2 19:33:41.615000 audit[2904]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa6e5f60 a2=3 a3=1 items=0 ppid=1 pid=2904 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:41.626406 kernel: audit: type=1300 audit(1696275221.615:1261): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa6e5f60 a2=3 a3=1 items=0 ppid=1 pid=2904 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:41.626471 kernel: audit: type=1327 audit(1696275221.615:1261): proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:41.615000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:41.623000 audit[2904]: USER_START pid=2904 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:41.630745 kernel: audit: type=1105 audit(1696275221.623:1262): pid=2904 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:41.630792 kernel: audit: type=1103 audit(1696275221.624:1263): pid=2906 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:41.624000 audit[2906]: CRED_ACQ pid=2906 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:41.737889 sshd[2904]: pam_unix(sshd:session): session closed for user core Oct 2 19:33:41.737000 audit[2904]: USER_END pid=2904 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:41.740320 systemd[1]: sshd@25-10.0.0.8:22-10.0.0.1:44250.service: Deactivated successfully. Oct 2 19:33:41.741297 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:33:41.741871 systemd-logind[1131]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:33:41.737000 audit[2904]: CRED_DISP pid=2904 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:41.742507 systemd-logind[1131]: Removed session 26. Oct 2 19:33:41.745371 kernel: audit: type=1106 audit(1696275221.737:1264): pid=2904 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:41.745450 kernel: audit: type=1104 audit(1696275221.737:1265): pid=2904 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:41.737000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.8:22-10.0.0.1:44250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:42.260723 kubelet[2004]: E1002 19:33:42.260690 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:33:47.261486 kubelet[2004]: E1002 19:33:47.261454 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:33:49.148703 kubelet[2004]: E1002 19:33:49.148668 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:33:49.149012 kubelet[2004]: E1002 19:33:49.148898 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e)\"" pod="kube-system/cilium-sj7vg" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e Oct 2 19:33:51.742594 systemd[1]: Started sshd@26-10.0.0.8:22-10.0.0.1:52638.service. Oct 2 19:33:51.741000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.8:22-10.0.0.1:52638 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:51.743434 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:33:51.743486 kernel: audit: type=1130 audit(1696275231.741:1267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.8:22-10.0.0.1:52638 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:51.789000 audit[2917]: USER_ACCT pid=2917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:51.790389 sshd[2917]: Accepted publickey for core from 10.0.0.1 port 52638 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:33:51.792181 sshd[2917]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:51.790000 audit[2917]: CRED_ACQ pid=2917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:51.796317 systemd[1]: Started session-27.scope. Oct 2 19:33:51.796443 kernel: audit: type=1101 audit(1696275231.789:1268): pid=2917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:51.796483 kernel: audit: type=1103 audit(1696275231.790:1269): pid=2917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:51.796716 systemd-logind[1131]: New session 27 of user core. Oct 2 19:33:51.798448 kernel: audit: type=1006 audit(1696275231.790:1270): pid=2917 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:33:51.790000 audit[2917]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe59fb4b0 a2=3 a3=1 items=0 ppid=1 pid=2917 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:51.802042 kernel: audit: type=1300 audit(1696275231.790:1270): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe59fb4b0 a2=3 a3=1 items=0 ppid=1 pid=2917 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:51.802137 kernel: audit: type=1327 audit(1696275231.790:1270): proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:51.790000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:51.799000 audit[2917]: USER_START pid=2917 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:51.806431 kernel: audit: type=1105 audit(1696275231.799:1271): pid=2917 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:51.800000 audit[2919]: CRED_ACQ pid=2919 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:51.809424 kernel: audit: type=1103 audit(1696275231.800:1272): pid=2919 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:51.921306 sshd[2917]: pam_unix(sshd:session): session closed for user core Oct 2 19:33:51.921000 audit[2917]: USER_END pid=2917 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:51.923861 systemd[1]: sshd@26-10.0.0.8:22-10.0.0.1:52638.service: Deactivated successfully. Oct 2 19:33:51.924180 systemd-logind[1131]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:33:51.924694 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:33:51.921000 audit[2917]: CRED_DISP pid=2917 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:51.927430 systemd-logind[1131]: Removed session 27. Oct 2 19:33:51.928691 kernel: audit: type=1106 audit(1696275231.921:1273): pid=2917 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:51.928732 kernel: audit: type=1104 audit(1696275231.921:1274): pid=2917 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:51.923000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.8:22-10.0.0.1:52638 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:52.262930 kubelet[2004]: E1002 19:33:52.262896 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:33:57.263982 kubelet[2004]: E1002 19:33:57.263919 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:00.147752 kubelet[2004]: E1002 19:34:00.147721 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:00.148095 kubelet[2004]: E1002 19:34:00.148018 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-sj7vg_kube-system(34b8cc7b-5768-41e5-9c5b-122435a1fb3e)\"" pod="kube-system/cilium-sj7vg" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e Oct 2 19:34:01.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.8:22-10.0.0.1:33496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:01.926037 systemd[1]: Started sshd@27-10.0.0.8:22-10.0.0.1:33496.service. Oct 2 19:34:01.929712 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:34:01.929765 kernel: audit: type=1130 audit(1696275241.925:1276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.8:22-10.0.0.1:33496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:01.970000 audit[2933]: USER_ACCT pid=2933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:01.972200 sshd[2933]: Accepted publickey for core from 10.0.0.1 port 33496 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:34:01.973732 sshd[2933]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:34:01.972000 audit[2933]: CRED_ACQ pid=2933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:01.978127 kernel: audit: type=1101 audit(1696275241.970:1277): pid=2933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:01.978188 kernel: audit: type=1103 audit(1696275241.972:1278): pid=2933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:01.978208 kernel: audit: type=1006 audit(1696275241.972:1279): pid=2933 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:34:01.977821 systemd-logind[1131]: New session 28 of user core. Oct 2 19:34:01.978310 systemd[1]: Started session-28.scope. Oct 2 19:34:01.972000 audit[2933]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff59486b0 a2=3 a3=1 items=0 ppid=1 pid=2933 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:01.983000 kernel: audit: type=1300 audit(1696275241.972:1279): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff59486b0 a2=3 a3=1 items=0 ppid=1 pid=2933 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:01.983062 kernel: audit: type=1327 audit(1696275241.972:1279): proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:01.972000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:01.981000 audit[2933]: USER_START pid=2933 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:01.987478 kernel: audit: type=1105 audit(1696275241.981:1280): pid=2933 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:01.987540 kernel: audit: type=1103 audit(1696275241.983:1281): pid=2935 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:01.983000 audit[2935]: CRED_ACQ pid=2935 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:02.105955 sshd[2933]: pam_unix(sshd:session): session closed for user core Oct 2 19:34:02.105000 audit[2933]: USER_END pid=2933 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:02.109949 systemd[1]: Started sshd@28-10.0.0.8:22-10.0.0.1:33510.service. Oct 2 19:34:02.114306 kernel: audit: type=1106 audit(1696275242.105:1282): pid=2933 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:02.114384 kernel: audit: type=1104 audit(1696275242.105:1283): pid=2933 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:02.105000 audit[2933]: CRED_DISP pid=2933 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:02.112387 systemd[1]: sshd@27-10.0.0.8:22-10.0.0.1:33496.service: Deactivated successfully. Oct 2 19:34:02.113331 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:34:02.114679 systemd-logind[1131]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:34:02.108000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.8:22-10.0.0.1:33510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:02.111000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.8:22-10.0.0.1:33496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:02.115803 systemd-logind[1131]: Removed session 28. Oct 2 19:34:02.152000 audit[2948]: USER_ACCT pid=2948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:02.153870 sshd[2948]: Accepted publickey for core from 10.0.0.1 port 33510 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:34:02.153000 audit[2948]: CRED_ACQ pid=2948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:02.153000 audit[2948]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca889d10 a2=3 a3=1 items=0 ppid=1 pid=2948 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:02.153000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:02.155033 sshd[2948]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:34:02.159244 systemd-logind[1131]: New session 29 of user core. Oct 2 19:34:02.160185 systemd[1]: Started session-29.scope. Oct 2 19:34:02.163000 audit[2948]: USER_START pid=2948 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:02.164000 audit[2951]: CRED_ACQ pid=2951 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:02.265476 kubelet[2004]: E1002 19:34:02.265374 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:03.764000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:03.764000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40014516a0 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:34:03.764000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:03.765000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:03.765000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40021151a0 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:34:03.765000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:03.931628 env[1141]: time="2023-10-02T19:34:03.931542249Z" level=info msg="StopPodSandbox for \"9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a\"" Oct 2 19:34:03.931628 env[1141]: time="2023-10-02T19:34:03.931620930Z" level=info msg="Container to stop \"61b056c1b52aae127dd961b1475af5d6dc234cb2f6a7f3a99129667ea2b4c63f\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:34:03.933198 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a-shm.mount: Deactivated successfully. Oct 2 19:34:03.940564 env[1141]: time="2023-10-02T19:34:03.940516134Z" level=info msg="StopContainer for \"1a52933e9d82d8ba126cd466a840577da5c4a0e0b62af9713d7cc038fb2b046c\" with timeout 30 (s)" Oct 2 19:34:03.941004 env[1141]: time="2023-10-02T19:34:03.940972216Z" level=info msg="Stop container \"1a52933e9d82d8ba126cd466a840577da5c4a0e0b62af9713d7cc038fb2b046c\" with signal terminated" Oct 2 19:34:03.941817 systemd[1]: cri-containerd-9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a.scope: Deactivated successfully. Oct 2 19:34:03.940000 audit: BPF prog-id=110 op=UNLOAD Oct 2 19:34:03.945000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:34:03.960189 systemd[1]: cri-containerd-1a52933e9d82d8ba126cd466a840577da5c4a0e0b62af9713d7cc038fb2b046c.scope: Deactivated successfully. Oct 2 19:34:03.959000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:34:03.965000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:34:03.968492 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a-rootfs.mount: Deactivated successfully. Oct 2 19:34:03.976320 env[1141]: time="2023-10-02T19:34:03.976273153Z" level=info msg="shim disconnected" id=9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a Oct 2 19:34:03.976320 env[1141]: time="2023-10-02T19:34:03.976320474Z" level=warning msg="cleaning up after shim disconnected" id=9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a namespace=k8s.io Oct 2 19:34:03.976558 env[1141]: time="2023-10-02T19:34:03.976329914Z" level=info msg="cleaning up dead shim" Oct 2 19:34:03.984477 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1a52933e9d82d8ba126cd466a840577da5c4a0e0b62af9713d7cc038fb2b046c-rootfs.mount: Deactivated successfully. Oct 2 19:34:03.989390 env[1141]: time="2023-10-02T19:34:03.989346579Z" level=info msg="shim disconnected" id=1a52933e9d82d8ba126cd466a840577da5c4a0e0b62af9713d7cc038fb2b046c Oct 2 19:34:03.989390 env[1141]: time="2023-10-02T19:34:03.989388259Z" level=warning msg="cleaning up after shim disconnected" id=1a52933e9d82d8ba126cd466a840577da5c4a0e0b62af9713d7cc038fb2b046c namespace=k8s.io Oct 2 19:34:03.989603 env[1141]: time="2023-10-02T19:34:03.989398139Z" level=info msg="cleaning up dead shim" Oct 2 19:34:03.989977 env[1141]: time="2023-10-02T19:34:03.989945302Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:34:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2994 runtime=io.containerd.runc.v2\n" Oct 2 19:34:03.990297 env[1141]: time="2023-10-02T19:34:03.990273584Z" level=info msg="TearDown network for sandbox \"9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a\" successfully" Oct 2 19:34:03.990354 env[1141]: time="2023-10-02T19:34:03.990298864Z" level=info msg="StopPodSandbox for \"9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a\" returns successfully" Oct 2 19:34:04.001280 env[1141]: time="2023-10-02T19:34:04.001237639Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:34:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3008 runtime=io.containerd.runc.v2\n" Oct 2 19:34:04.002943 env[1141]: time="2023-10-02T19:34:04.002896007Z" level=info msg="StopContainer for \"1a52933e9d82d8ba126cd466a840577da5c4a0e0b62af9713d7cc038fb2b046c\" returns successfully" Oct 2 19:34:04.003415 env[1141]: time="2023-10-02T19:34:04.003380849Z" level=info msg="StopPodSandbox for \"b57ea8fee9c8a2914d364bf228f561b6daae92e38e62877ccda29b565c292e15\"" Oct 2 19:34:04.003559 env[1141]: time="2023-10-02T19:34:04.003537650Z" level=info msg="Container to stop \"1a52933e9d82d8ba126cd466a840577da5c4a0e0b62af9713d7cc038fb2b046c\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:34:04.004856 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-b57ea8fee9c8a2914d364bf228f561b6daae92e38e62877ccda29b565c292e15-shm.mount: Deactivated successfully. Oct 2 19:34:04.011000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:34:04.012578 systemd[1]: cri-containerd-b57ea8fee9c8a2914d364bf228f561b6daae92e38e62877ccda29b565c292e15.scope: Deactivated successfully. Oct 2 19:34:04.019000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:34:04.037000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:04.037000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=40141984e0 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:34:04.037000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:34:04.037000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:04.037000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400a670fe0 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:34:04.037000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:34:04.037833 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b57ea8fee9c8a2914d364bf228f561b6daae92e38e62877ccda29b565c292e15-rootfs.mount: Deactivated successfully. Oct 2 19:34:04.041000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:04.041000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=4013b93e90 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:34:04.041000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:34:04.046156 env[1141]: time="2023-10-02T19:34:04.046089981Z" level=info msg="shim disconnected" id=b57ea8fee9c8a2914d364bf228f561b6daae92e38e62877ccda29b565c292e15 Oct 2 19:34:04.046345 env[1141]: time="2023-10-02T19:34:04.046325982Z" level=warning msg="cleaning up after shim disconnected" id=b57ea8fee9c8a2914d364bf228f561b6daae92e38e62877ccda29b565c292e15 namespace=k8s.io Oct 2 19:34:04.046424 env[1141]: time="2023-10-02T19:34:04.046399503Z" level=info msg="cleaning up dead shim" Oct 2 19:34:04.049000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6811 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:04.049000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=4013b93ec0 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:34:04.049000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:34:04.055696 env[1141]: time="2023-10-02T19:34:04.055654229Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:34:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3039 runtime=io.containerd.runc.v2\n" Oct 2 19:34:04.056177 env[1141]: time="2023-10-02T19:34:04.056143711Z" level=info msg="TearDown network for sandbox \"b57ea8fee9c8a2914d364bf228f561b6daae92e38e62877ccda29b565c292e15\" successfully" Oct 2 19:34:04.056299 env[1141]: time="2023-10-02T19:34:04.056277512Z" level=info msg="StopPodSandbox for \"b57ea8fee9c8a2914d364bf228f561b6daae92e38e62877ccda29b565c292e15\" returns successfully" Oct 2 19:34:04.058000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:04.058000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:04.058000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=401410d470 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:34:04.058000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400a5c5020 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:34:04.058000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:34:04.058000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:34:04.121786 kubelet[2004]: I1002 19:34:04.121348 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-hubble-tls\") pod \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " Oct 2 19:34:04.121786 kubelet[2004]: I1002 19:34:04.121395 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-host-proc-sys-kernel\") pod \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " Oct 2 19:34:04.121786 kubelet[2004]: I1002 19:34:04.121427 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-clustermesh-secrets\") pod \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " Oct 2 19:34:04.121786 kubelet[2004]: I1002 19:34:04.121446 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-cilium-run\") pod \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " Oct 2 19:34:04.121786 kubelet[2004]: I1002 19:34:04.121465 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-hostproc\") pod \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " Oct 2 19:34:04.121786 kubelet[2004]: I1002 19:34:04.121482 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-lib-modules\") pod \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " Oct 2 19:34:04.121786 kubelet[2004]: I1002 19:34:04.121502 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-etc-cni-netd\") pod \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " Oct 2 19:34:04.121786 kubelet[2004]: I1002 19:34:04.121547 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-host-proc-sys-net\") pod \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " Oct 2 19:34:04.121786 kubelet[2004]: I1002 19:34:04.121565 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-bpf-maps\") pod \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " Oct 2 19:34:04.121786 kubelet[2004]: I1002 19:34:04.121583 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-cilium-cgroup\") pod \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " Oct 2 19:34:04.121786 kubelet[2004]: I1002 19:34:04.121600 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-xtables-lock\") pod \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " Oct 2 19:34:04.121786 kubelet[2004]: I1002 19:34:04.121620 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-ccrx5\" (UniqueName: \"kubernetes.io/projected/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-kube-api-access-ccrx5\") pod \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " Oct 2 19:34:04.121786 kubelet[2004]: I1002 19:34:04.121641 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-cilium-config-path\") pod \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " Oct 2 19:34:04.121786 kubelet[2004]: I1002 19:34:04.121659 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-cni-path\") pod \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\" (UID: \"34b8cc7b-5768-41e5-9c5b-122435a1fb3e\") " Oct 2 19:34:04.126759 kubelet[2004]: I1002 19:34:04.126729 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-cni-path" (OuterVolumeSpecName: "cni-path") pod "34b8cc7b-5768-41e5-9c5b-122435a1fb3e" (UID: "34b8cc7b-5768-41e5-9c5b-122435a1fb3e"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:34:04.126879 kubelet[2004]: I1002 19:34:04.126730 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "34b8cc7b-5768-41e5-9c5b-122435a1fb3e" (UID: "34b8cc7b-5768-41e5-9c5b-122435a1fb3e"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:34:04.126944 kubelet[2004]: I1002 19:34:04.126756 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "34b8cc7b-5768-41e5-9c5b-122435a1fb3e" (UID: "34b8cc7b-5768-41e5-9c5b-122435a1fb3e"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:34:04.127012 kubelet[2004]: W1002 19:34:04.126975 2004 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/34b8cc7b-5768-41e5-9c5b-122435a1fb3e/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:34:04.127107 kubelet[2004]: I1002 19:34:04.127069 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "34b8cc7b-5768-41e5-9c5b-122435a1fb3e" (UID: "34b8cc7b-5768-41e5-9c5b-122435a1fb3e"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:34:04.127234 kubelet[2004]: I1002 19:34:04.127179 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "34b8cc7b-5768-41e5-9c5b-122435a1fb3e" (UID: "34b8cc7b-5768-41e5-9c5b-122435a1fb3e"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:34:04.127319 kubelet[2004]: I1002 19:34:04.126730 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "34b8cc7b-5768-41e5-9c5b-122435a1fb3e" (UID: "34b8cc7b-5768-41e5-9c5b-122435a1fb3e"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:34:04.127393 kubelet[2004]: I1002 19:34:04.126769 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-hostproc" (OuterVolumeSpecName: "hostproc") pod "34b8cc7b-5768-41e5-9c5b-122435a1fb3e" (UID: "34b8cc7b-5768-41e5-9c5b-122435a1fb3e"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:34:04.127459 kubelet[2004]: I1002 19:34:04.126772 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "34b8cc7b-5768-41e5-9c5b-122435a1fb3e" (UID: "34b8cc7b-5768-41e5-9c5b-122435a1fb3e"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:34:04.127514 kubelet[2004]: I1002 19:34:04.126782 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "34b8cc7b-5768-41e5-9c5b-122435a1fb3e" (UID: "34b8cc7b-5768-41e5-9c5b-122435a1fb3e"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:34:04.127620 kubelet[2004]: I1002 19:34:04.126785 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "34b8cc7b-5768-41e5-9c5b-122435a1fb3e" (UID: "34b8cc7b-5768-41e5-9c5b-122435a1fb3e"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:34:04.129494 kubelet[2004]: I1002 19:34:04.128786 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "34b8cc7b-5768-41e5-9c5b-122435a1fb3e" (UID: "34b8cc7b-5768-41e5-9c5b-122435a1fb3e"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:34:04.134426 kubelet[2004]: I1002 19:34:04.134386 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "34b8cc7b-5768-41e5-9c5b-122435a1fb3e" (UID: "34b8cc7b-5768-41e5-9c5b-122435a1fb3e"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:34:04.134595 kubelet[2004]: I1002 19:34:04.134558 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "34b8cc7b-5768-41e5-9c5b-122435a1fb3e" (UID: "34b8cc7b-5768-41e5-9c5b-122435a1fb3e"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:34:04.134996 kubelet[2004]: I1002 19:34:04.134967 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-kube-api-access-ccrx5" (OuterVolumeSpecName: "kube-api-access-ccrx5") pod "34b8cc7b-5768-41e5-9c5b-122435a1fb3e" (UID: "34b8cc7b-5768-41e5-9c5b-122435a1fb3e"). InnerVolumeSpecName "kube-api-access-ccrx5". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:34:04.221857 kubelet[2004]: I1002 19:34:04.221811 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/2243cc77-d50f-4fe1-a3b5-1cd3221755f9-cilium-config-path\") pod \"2243cc77-d50f-4fe1-a3b5-1cd3221755f9\" (UID: \"2243cc77-d50f-4fe1-a3b5-1cd3221755f9\") " Oct 2 19:34:04.221857 kubelet[2004]: I1002 19:34:04.221863 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-vsv29\" (UniqueName: \"kubernetes.io/projected/2243cc77-d50f-4fe1-a3b5-1cd3221755f9-kube-api-access-vsv29\") pod \"2243cc77-d50f-4fe1-a3b5-1cd3221755f9\" (UID: \"2243cc77-d50f-4fe1-a3b5-1cd3221755f9\") " Oct 2 19:34:04.222091 kubelet[2004]: I1002 19:34:04.221904 2004 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 19:34:04.222091 kubelet[2004]: I1002 19:34:04.221918 2004 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 19:34:04.222091 kubelet[2004]: I1002 19:34:04.221931 2004 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 19:34:04.222091 kubelet[2004]: I1002 19:34:04.221940 2004 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 19:34:04.222091 kubelet[2004]: I1002 19:34:04.221951 2004 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-ccrx5\" (UniqueName: \"kubernetes.io/projected/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-kube-api-access-ccrx5\") on node \"localhost\" DevicePath \"\"" Oct 2 19:34:04.222091 kubelet[2004]: I1002 19:34:04.221963 2004 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:34:04.222091 kubelet[2004]: I1002 19:34:04.221972 2004 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:34:04.222091 kubelet[2004]: I1002 19:34:04.221981 2004 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 19:34:04.222091 kubelet[2004]: I1002 19:34:04.221990 2004 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 19:34:04.222091 kubelet[2004]: I1002 19:34:04.222001 2004 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 19:34:04.222091 kubelet[2004]: I1002 19:34:04.222010 2004 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 19:34:04.222091 kubelet[2004]: I1002 19:34:04.222019 2004 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:34:04.222091 kubelet[2004]: I1002 19:34:04.222029 2004 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 19:34:04.222091 kubelet[2004]: I1002 19:34:04.222038 2004 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/34b8cc7b-5768-41e5-9c5b-122435a1fb3e-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 19:34:04.222472 kubelet[2004]: W1002 19:34:04.222374 2004 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/2243cc77-d50f-4fe1-a3b5-1cd3221755f9/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:34:04.224136 kubelet[2004]: I1002 19:34:04.224095 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/2243cc77-d50f-4fe1-a3b5-1cd3221755f9-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "2243cc77-d50f-4fe1-a3b5-1cd3221755f9" (UID: "2243cc77-d50f-4fe1-a3b5-1cd3221755f9"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:34:04.225170 kubelet[2004]: I1002 19:34:04.225134 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/2243cc77-d50f-4fe1-a3b5-1cd3221755f9-kube-api-access-vsv29" (OuterVolumeSpecName: "kube-api-access-vsv29") pod "2243cc77-d50f-4fe1-a3b5-1cd3221755f9" (UID: "2243cc77-d50f-4fe1-a3b5-1cd3221755f9"). InnerVolumeSpecName "kube-api-access-vsv29". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:34:04.322526 kubelet[2004]: I1002 19:34:04.322480 2004 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-vsv29\" (UniqueName: \"kubernetes.io/projected/2243cc77-d50f-4fe1-a3b5-1cd3221755f9-kube-api-access-vsv29\") on node \"localhost\" DevicePath \"\"" Oct 2 19:34:04.322526 kubelet[2004]: I1002 19:34:04.322516 2004 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/2243cc77-d50f-4fe1-a3b5-1cd3221755f9-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:34:04.621040 kubelet[2004]: I1002 19:34:04.620898 2004 scope.go:115] "RemoveContainer" containerID="1a52933e9d82d8ba126cd466a840577da5c4a0e0b62af9713d7cc038fb2b046c" Oct 2 19:34:04.622389 env[1141]: time="2023-10-02T19:34:04.622334962Z" level=info msg="RemoveContainer for \"1a52933e9d82d8ba126cd466a840577da5c4a0e0b62af9713d7cc038fb2b046c\"" Oct 2 19:34:04.626218 env[1141]: time="2023-10-02T19:34:04.626164861Z" level=info msg="RemoveContainer for \"1a52933e9d82d8ba126cd466a840577da5c4a0e0b62af9713d7cc038fb2b046c\" returns successfully" Oct 2 19:34:04.627145 kubelet[2004]: I1002 19:34:04.626357 2004 scope.go:115] "RemoveContainer" containerID="1a52933e9d82d8ba126cd466a840577da5c4a0e0b62af9713d7cc038fb2b046c" Oct 2 19:34:04.628985 systemd[1]: Removed slice kubepods-burstable-pod34b8cc7b_5768_41e5_9c5b_122435a1fb3e.slice. Oct 2 19:34:04.629500 env[1141]: time="2023-10-02T19:34:04.629389557Z" level=error msg="ContainerStatus for \"1a52933e9d82d8ba126cd466a840577da5c4a0e0b62af9713d7cc038fb2b046c\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"1a52933e9d82d8ba126cd466a840577da5c4a0e0b62af9713d7cc038fb2b046c\": not found" Oct 2 19:34:04.629943 kubelet[2004]: E1002 19:34:04.629922 2004 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"1a52933e9d82d8ba126cd466a840577da5c4a0e0b62af9713d7cc038fb2b046c\": not found" containerID="1a52933e9d82d8ba126cd466a840577da5c4a0e0b62af9713d7cc038fb2b046c" Oct 2 19:34:04.629989 kubelet[2004]: I1002 19:34:04.629968 2004 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:1a52933e9d82d8ba126cd466a840577da5c4a0e0b62af9713d7cc038fb2b046c} err="failed to get container status \"1a52933e9d82d8ba126cd466a840577da5c4a0e0b62af9713d7cc038fb2b046c\": rpc error: code = NotFound desc = an error occurred when try to find container \"1a52933e9d82d8ba126cd466a840577da5c4a0e0b62af9713d7cc038fb2b046c\": not found" Oct 2 19:34:04.629989 kubelet[2004]: I1002 19:34:04.629981 2004 scope.go:115] "RemoveContainer" containerID="61b056c1b52aae127dd961b1475af5d6dc234cb2f6a7f3a99129667ea2b4c63f" Oct 2 19:34:04.630589 systemd[1]: Removed slice kubepods-besteffort-pod2243cc77_d50f_4fe1_a3b5_1cd3221755f9.slice. Oct 2 19:34:04.631826 env[1141]: time="2023-10-02T19:34:04.631781889Z" level=info msg="RemoveContainer for \"61b056c1b52aae127dd961b1475af5d6dc234cb2f6a7f3a99129667ea2b4c63f\"" Oct 2 19:34:04.637923 env[1141]: time="2023-10-02T19:34:04.637797599Z" level=info msg="RemoveContainer for \"61b056c1b52aae127dd961b1475af5d6dc234cb2f6a7f3a99129667ea2b4c63f\" returns successfully" Oct 2 19:34:04.933073 systemd[1]: var-lib-kubelet-pods-2243cc77\x2dd50f\x2d4fe1\x2da3b5\x2d1cd3221755f9-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dvsv29.mount: Deactivated successfully. Oct 2 19:34:04.933197 systemd[1]: var-lib-kubelet-pods-34b8cc7b\x2d5768\x2d41e5\x2d9c5b\x2d122435a1fb3e-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dccrx5.mount: Deactivated successfully. Oct 2 19:34:04.933252 systemd[1]: var-lib-kubelet-pods-34b8cc7b\x2d5768\x2d41e5\x2d9c5b\x2d122435a1fb3e-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:34:04.933303 systemd[1]: var-lib-kubelet-pods-34b8cc7b\x2d5768\x2d41e5\x2d9c5b\x2d122435a1fb3e-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:34:05.151005 kubelet[2004]: E1002 19:34:05.150977 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:05.152853 kubelet[2004]: I1002 19:34:05.152829 2004 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=2243cc77-d50f-4fe1-a3b5-1cd3221755f9 path="/var/lib/kubelet/pods/2243cc77-d50f-4fe1-a3b5-1cd3221755f9/volumes" Oct 2 19:34:05.153442 kubelet[2004]: I1002 19:34:05.153423 2004 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=34b8cc7b-5768-41e5-9c5b-122435a1fb3e path="/var/lib/kubelet/pods/34b8cc7b-5768-41e5-9c5b-122435a1fb3e/volumes" Oct 2 19:34:05.896179 sshd[2948]: pam_unix(sshd:session): session closed for user core Oct 2 19:34:05.896000 audit[2948]: USER_END pid=2948 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:05.896000 audit[2948]: CRED_DISP pid=2948 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:05.900000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.8:22-10.0.0.1:51560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:05.901639 systemd[1]: Started sshd@29-10.0.0.8:22-10.0.0.1:51560.service. Oct 2 19:34:05.901000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.8:22-10.0.0.1:33510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:05.902175 systemd[1]: sshd@28-10.0.0.8:22-10.0.0.1:33510.service: Deactivated successfully. Oct 2 19:34:05.902970 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:34:05.903186 systemd[1]: session-29.scope: Consumed 1.099s CPU time. Oct 2 19:34:05.903742 systemd-logind[1131]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:34:05.904786 systemd-logind[1131]: Removed session 29. Oct 2 19:34:05.950000 audit[3056]: USER_ACCT pid=3056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:05.952362 sshd[3056]: Accepted publickey for core from 10.0.0.1 port 51560 ssh2: RSA SHA256:R3OEPhWkv1tFTzpShOfiax8deu3eER597BueAu9DxLo Oct 2 19:34:05.951000 audit[3056]: CRED_ACQ pid=3056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:05.952000 audit[3056]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce00dd70 a2=3 a3=1 items=0 ppid=1 pid=3056 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:05.952000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:05.953431 sshd[3056]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:34:05.957442 systemd-logind[1131]: New session 30 of user core. Oct 2 19:34:05.957973 systemd[1]: Started session-30.scope. Oct 2 19:34:05.960000 audit[3056]: USER_START pid=3056 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:05.962000 audit[3059]: CRED_ACQ pid=3059 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:06.689032 kubelet[2004]: I1002 19:34:06.689000 2004 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:34:06.689465 kubelet[2004]: E1002 19:34:06.689444 2004 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="34b8cc7b-5768-41e5-9c5b-122435a1fb3e" containerName="mount-cgroup" Oct 2 19:34:06.689541 kubelet[2004]: E1002 19:34:06.689531 2004 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="34b8cc7b-5768-41e5-9c5b-122435a1fb3e" containerName="mount-cgroup" Oct 2 19:34:06.689598 kubelet[2004]: E1002 19:34:06.689585 2004 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="34b8cc7b-5768-41e5-9c5b-122435a1fb3e" containerName="mount-cgroup" Oct 2 19:34:06.689662 kubelet[2004]: E1002 19:34:06.689655 2004 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="34b8cc7b-5768-41e5-9c5b-122435a1fb3e" containerName="mount-cgroup" Oct 2 19:34:06.689712 kubelet[2004]: E1002 19:34:06.689704 2004 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="2243cc77-d50f-4fe1-a3b5-1cd3221755f9" containerName="cilium-operator" Oct 2 19:34:06.689785 kubelet[2004]: I1002 19:34:06.689776 2004 memory_manager.go:346] "RemoveStaleState removing state" podUID="34b8cc7b-5768-41e5-9c5b-122435a1fb3e" containerName="mount-cgroup" Oct 2 19:34:06.689844 kubelet[2004]: I1002 19:34:06.689837 2004 memory_manager.go:346] "RemoveStaleState removing state" podUID="34b8cc7b-5768-41e5-9c5b-122435a1fb3e" containerName="mount-cgroup" Oct 2 19:34:06.689905 kubelet[2004]: I1002 19:34:06.689892 2004 memory_manager.go:346] "RemoveStaleState removing state" podUID="34b8cc7b-5768-41e5-9c5b-122435a1fb3e" containerName="mount-cgroup" Oct 2 19:34:06.689956 kubelet[2004]: I1002 19:34:06.689948 2004 memory_manager.go:346] "RemoveStaleState removing state" podUID="34b8cc7b-5768-41e5-9c5b-122435a1fb3e" containerName="mount-cgroup" Oct 2 19:34:06.690017 kubelet[2004]: I1002 19:34:06.690005 2004 memory_manager.go:346] "RemoveStaleState removing state" podUID="2243cc77-d50f-4fe1-a3b5-1cd3221755f9" containerName="cilium-operator" Oct 2 19:34:06.690075 kubelet[2004]: I1002 19:34:06.690067 2004 memory_manager.go:346] "RemoveStaleState removing state" podUID="34b8cc7b-5768-41e5-9c5b-122435a1fb3e" containerName="mount-cgroup" Oct 2 19:34:06.690160 kubelet[2004]: E1002 19:34:06.690150 2004 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="34b8cc7b-5768-41e5-9c5b-122435a1fb3e" containerName="mount-cgroup" Oct 2 19:34:06.690220 kubelet[2004]: E1002 19:34:06.690213 2004 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="34b8cc7b-5768-41e5-9c5b-122435a1fb3e" containerName="mount-cgroup" Oct 2 19:34:06.690300 kubelet[2004]: I1002 19:34:06.690292 2004 memory_manager.go:346] "RemoveStaleState removing state" podUID="34b8cc7b-5768-41e5-9c5b-122435a1fb3e" containerName="mount-cgroup" Oct 2 19:34:06.695544 systemd[1]: Created slice kubepods-burstable-pod64c19431_34e1_441b_b8f1_e183c03b3d62.slice. Oct 2 19:34:06.702774 kubelet[2004]: W1002 19:34:06.702745 2004 reflector.go:533] object-"kube-system"/"cilium-ipsec-keys": failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:34:06.702969 kubelet[2004]: E1002 19:34:06.702956 2004 reflector.go:148] object-"kube-system"/"cilium-ipsec-keys": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:34:06.703740 kubelet[2004]: W1002 19:34:06.703720 2004 reflector.go:533] object-"kube-system"/"hubble-server-certs": failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:34:06.703868 kubelet[2004]: E1002 19:34:06.703857 2004 reflector.go:148] object-"kube-system"/"hubble-server-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:34:06.703939 kubelet[2004]: W1002 19:34:06.703733 2004 reflector.go:533] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:34:06.704025 kubelet[2004]: E1002 19:34:06.704015 2004 reflector.go:148] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:34:06.704163 kubelet[2004]: W1002 19:34:06.704149 2004 reflector.go:533] object-"kube-system"/"cilium-config": failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:34:06.704230 kubelet[2004]: E1002 19:34:06.704221 2004 reflector.go:148] object-"kube-system"/"cilium-config": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:34:06.835523 kubelet[2004]: I1002 19:34:06.835482 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-lib-modules\") pod \"cilium-2c9w4\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " pod="kube-system/cilium-2c9w4" Oct 2 19:34:06.835758 kubelet[2004]: I1002 19:34:06.835744 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-host-proc-sys-net\") pod \"cilium-2c9w4\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " pod="kube-system/cilium-2c9w4" Oct 2 19:34:06.835911 kubelet[2004]: I1002 19:34:06.835895 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/64c19431-34e1-441b-b8f1-e183c03b3d62-hubble-tls\") pod \"cilium-2c9w4\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " pod="kube-system/cilium-2c9w4" Oct 2 19:34:06.836011 kubelet[2004]: I1002 19:34:06.836000 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-etc-cni-netd\") pod \"cilium-2c9w4\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " pod="kube-system/cilium-2c9w4" Oct 2 19:34:06.836103 kubelet[2004]: I1002 19:34:06.836093 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/64c19431-34e1-441b-b8f1-e183c03b3d62-cilium-config-path\") pod \"cilium-2c9w4\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " pod="kube-system/cilium-2c9w4" Oct 2 19:34:06.836230 kubelet[2004]: I1002 19:34:06.836218 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-f6ctj\" (UniqueName: \"kubernetes.io/projected/64c19431-34e1-441b-b8f1-e183c03b3d62-kube-api-access-f6ctj\") pod \"cilium-2c9w4\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " pod="kube-system/cilium-2c9w4" Oct 2 19:34:06.836333 kubelet[2004]: I1002 19:34:06.836321 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-cilium-run\") pod \"cilium-2c9w4\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " pod="kube-system/cilium-2c9w4" Oct 2 19:34:06.836459 kubelet[2004]: I1002 19:34:06.836430 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/64c19431-34e1-441b-b8f1-e183c03b3d62-clustermesh-secrets\") pod \"cilium-2c9w4\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " pod="kube-system/cilium-2c9w4" Oct 2 19:34:06.836505 kubelet[2004]: I1002 19:34:06.836491 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-host-proc-sys-kernel\") pod \"cilium-2c9w4\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " pod="kube-system/cilium-2c9w4" Oct 2 19:34:06.836536 kubelet[2004]: I1002 19:34:06.836518 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/64c19431-34e1-441b-b8f1-e183c03b3d62-cilium-ipsec-secrets\") pod \"cilium-2c9w4\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " pod="kube-system/cilium-2c9w4" Oct 2 19:34:06.836562 kubelet[2004]: I1002 19:34:06.836545 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-bpf-maps\") pod \"cilium-2c9w4\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " pod="kube-system/cilium-2c9w4" Oct 2 19:34:06.836602 kubelet[2004]: I1002 19:34:06.836588 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-hostproc\") pod \"cilium-2c9w4\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " pod="kube-system/cilium-2c9w4" Oct 2 19:34:06.836634 kubelet[2004]: I1002 19:34:06.836612 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-cilium-cgroup\") pod \"cilium-2c9w4\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " pod="kube-system/cilium-2c9w4" Oct 2 19:34:06.836659 kubelet[2004]: I1002 19:34:06.836635 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-cni-path\") pod \"cilium-2c9w4\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " pod="kube-system/cilium-2c9w4" Oct 2 19:34:06.836659 kubelet[2004]: I1002 19:34:06.836653 2004 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-xtables-lock\") pod \"cilium-2c9w4\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " pod="kube-system/cilium-2c9w4" Oct 2 19:34:07.121933 env[1141]: time="2023-10-02T19:34:07.121888293Z" level=info msg="StopPodSandbox for \"9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a\"" Oct 2 19:34:07.122291 env[1141]: time="2023-10-02T19:34:07.121986933Z" level=info msg="TearDown network for sandbox \"9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a\" successfully" Oct 2 19:34:07.122291 env[1141]: time="2023-10-02T19:34:07.122031534Z" level=info msg="StopPodSandbox for \"9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a\" returns successfully" Oct 2 19:34:07.122596 env[1141]: time="2023-10-02T19:34:07.122566416Z" level=info msg="RemovePodSandbox for \"9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a\"" Oct 2 19:34:07.122642 env[1141]: time="2023-10-02T19:34:07.122604816Z" level=info msg="Forcibly stopping sandbox \"9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a\"" Oct 2 19:34:07.122688 env[1141]: time="2023-10-02T19:34:07.122673017Z" level=info msg="TearDown network for sandbox \"9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a\" successfully" Oct 2 19:34:07.128402 env[1141]: time="2023-10-02T19:34:07.128236524Z" level=info msg="RemovePodSandbox \"9918190b7bcc5703ed1c4def391539a10bc0d9841e0dfb7c51bc219af4cd300a\" returns successfully" Oct 2 19:34:07.129167 env[1141]: time="2023-10-02T19:34:07.128927087Z" level=info msg="StopPodSandbox for \"b57ea8fee9c8a2914d364bf228f561b6daae92e38e62877ccda29b565c292e15\"" Oct 2 19:34:07.129167 env[1141]: time="2023-10-02T19:34:07.129015607Z" level=info msg="TearDown network for sandbox \"b57ea8fee9c8a2914d364bf228f561b6daae92e38e62877ccda29b565c292e15\" successfully" Oct 2 19:34:07.129167 env[1141]: time="2023-10-02T19:34:07.129050087Z" level=info msg="StopPodSandbox for \"b57ea8fee9c8a2914d364bf228f561b6daae92e38e62877ccda29b565c292e15\" returns successfully" Oct 2 19:34:07.130229 env[1141]: time="2023-10-02T19:34:07.129969892Z" level=info msg="RemovePodSandbox for \"b57ea8fee9c8a2914d364bf228f561b6daae92e38e62877ccda29b565c292e15\"" Oct 2 19:34:07.130229 env[1141]: time="2023-10-02T19:34:07.130001812Z" level=info msg="Forcibly stopping sandbox \"b57ea8fee9c8a2914d364bf228f561b6daae92e38e62877ccda29b565c292e15\"" Oct 2 19:34:07.130229 env[1141]: time="2023-10-02T19:34:07.130069972Z" level=info msg="TearDown network for sandbox \"b57ea8fee9c8a2914d364bf228f561b6daae92e38e62877ccda29b565c292e15\" successfully" Oct 2 19:34:07.132916 env[1141]: time="2023-10-02T19:34:07.132868506Z" level=info msg="RemovePodSandbox \"b57ea8fee9c8a2914d364bf228f561b6daae92e38e62877ccda29b565c292e15\" returns successfully" Oct 2 19:34:07.266685 kubelet[2004]: E1002 19:34:07.266656 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:07.938740 kubelet[2004]: E1002 19:34:07.938705 2004 configmap.go:199] Couldn't get configMap kube-system/cilium-config: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:34:07.939259 kubelet[2004]: E1002 19:34:07.939214 2004 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/64c19431-34e1-441b-b8f1-e183c03b3d62-cilium-config-path podName:64c19431-34e1-441b-b8f1-e183c03b3d62 nodeName:}" failed. No retries permitted until 2023-10-02 19:34:08.439188875 +0000 UTC m=+241.423381292 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-config-path" (UniqueName: "kubernetes.io/configmap/64c19431-34e1-441b-b8f1-e183c03b3d62-cilium-config-path") pod "cilium-2c9w4" (UID: "64c19431-34e1-441b-b8f1-e183c03b3d62") : failed to sync configmap cache: timed out waiting for the condition Oct 2 19:34:07.939372 kubelet[2004]: E1002 19:34:07.938730 2004 secret.go:194] Couldn't get secret kube-system/cilium-ipsec-keys: failed to sync secret cache: timed out waiting for the condition Oct 2 19:34:07.939516 kubelet[2004]: E1002 19:34:07.939500 2004 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/64c19431-34e1-441b-b8f1-e183c03b3d62-cilium-ipsec-secrets podName:64c19431-34e1-441b-b8f1-e183c03b3d62 nodeName:}" failed. No retries permitted until 2023-10-02 19:34:08.439487437 +0000 UTC m=+241.423679814 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-ipsec-secrets" (UniqueName: "kubernetes.io/secret/64c19431-34e1-441b-b8f1-e183c03b3d62-cilium-ipsec-secrets") pod "cilium-2c9w4" (UID: "64c19431-34e1-441b-b8f1-e183c03b3d62") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:34:08.497971 kubelet[2004]: E1002 19:34:08.497938 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:08.498481 env[1141]: time="2023-10-02T19:34:08.498443950Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-2c9w4,Uid:64c19431-34e1-441b-b8f1-e183c03b3d62,Namespace:kube-system,Attempt:0,}" Oct 2 19:34:08.864087 env[1141]: time="2023-10-02T19:34:08.863943936Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:08.865233 env[1141]: time="2023-10-02T19:34:08.865159182Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:08.873385 env[1141]: time="2023-10-02T19:34:08.873325541Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:08.878561 env[1141]: time="2023-10-02T19:34:08.878497806Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:08.893290 env[1141]: time="2023-10-02T19:34:08.893212716Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:34:08.893290 env[1141]: time="2023-10-02T19:34:08.893265756Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:34:08.893507 env[1141]: time="2023-10-02T19:34:08.893462757Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:34:08.893790 env[1141]: time="2023-10-02T19:34:08.893728519Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5d50b3f84f6d8a4cf0dc8fc3940002ae7642c2421b87b01dfe7ec3aee87c4304 pid=3080 runtime=io.containerd.runc.v2 Oct 2 19:34:08.909862 systemd[1]: Started cri-containerd-5d50b3f84f6d8a4cf0dc8fc3940002ae7642c2421b87b01dfe7ec3aee87c4304.scope. Oct 2 19:34:08.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.945445 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:34:08.945519 kernel: audit: type=1400 audit(1696275248.943:1314): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.950401 kernel: audit: type=1400 audit(1696275248.943:1315): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.950470 kernel: audit: type=1400 audit(1696275248.943:1316): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.955285 kernel: audit: type=1400 audit(1696275248.943:1317): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.955344 kernel: audit: type=1400 audit(1696275248.943:1318): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.960136 kernel: audit: type=1400 audit(1696275248.943:1319): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.960224 kernel: audit: type=1400 audit(1696275248.943:1320): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.962587 kernel: audit: type=1400 audit(1696275248.943:1321): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.967337 kernel: audit: type=1400 audit(1696275248.943:1322): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.967435 kernel: audit: type=1400 audit(1696275248.944:1323): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.944000 audit: BPF prog-id=125 op=LOAD Oct 2 19:34:08.944000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.944000 audit[3092]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3080 pid=3092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:08.944000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564353062336638346636643861346366306463386663333934303030 Oct 2 19:34:08.944000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.944000 audit[3092]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3080 pid=3092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:08.944000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564353062336638346636643861346366306463386663333934303030 Oct 2 19:34:08.944000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.944000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.944000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.944000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.944000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.944000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.944000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.944000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.944000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.944000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.944000 audit: BPF prog-id=126 op=LOAD Oct 2 19:34:08.944000 audit[3092]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3080 pid=3092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:08.944000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564353062336638346636643861346366306463386663333934303030 Oct 2 19:34:08.946000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.946000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.946000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.946000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.946000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.946000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.946000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.946000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.946000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.946000 audit: BPF prog-id=127 op=LOAD Oct 2 19:34:08.946000 audit[3092]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3080 pid=3092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:08.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564353062336638346636643861346366306463386663333934303030 Oct 2 19:34:08.949000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:34:08.949000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:34:08.949000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.949000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.949000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.949000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.949000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.949000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.949000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.949000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.949000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.949000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:08.949000 audit: BPF prog-id=128 op=LOAD Oct 2 19:34:08.949000 audit[3092]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3080 pid=3092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:08.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564353062336638346636643861346366306463386663333934303030 Oct 2 19:34:08.975461 env[1141]: time="2023-10-02T19:34:08.975421789Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-2c9w4,Uid:64c19431-34e1-441b-b8f1-e183c03b3d62,Namespace:kube-system,Attempt:0,} returns sandbox id \"5d50b3f84f6d8a4cf0dc8fc3940002ae7642c2421b87b01dfe7ec3aee87c4304\"" Oct 2 19:34:08.976101 kubelet[2004]: E1002 19:34:08.976083 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:08.978296 env[1141]: time="2023-10-02T19:34:08.978226962Z" level=info msg="CreateContainer within sandbox \"5d50b3f84f6d8a4cf0dc8fc3940002ae7642c2421b87b01dfe7ec3aee87c4304\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:34:08.996396 env[1141]: time="2023-10-02T19:34:08.996343169Z" level=info msg="CreateContainer within sandbox \"5d50b3f84f6d8a4cf0dc8fc3940002ae7642c2421b87b01dfe7ec3aee87c4304\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"456609e8300b4610c61b900e649306fc97c0a0ea9152d0a62d040eec2bd053ca\"" Oct 2 19:34:08.997530 env[1141]: time="2023-10-02T19:34:08.997487294Z" level=info msg="StartContainer for \"456609e8300b4610c61b900e649306fc97c0a0ea9152d0a62d040eec2bd053ca\"" Oct 2 19:34:09.017327 systemd[1]: Started cri-containerd-456609e8300b4610c61b900e649306fc97c0a0ea9152d0a62d040eec2bd053ca.scope. Oct 2 19:34:09.039627 systemd[1]: cri-containerd-456609e8300b4610c61b900e649306fc97c0a0ea9152d0a62d040eec2bd053ca.scope: Deactivated successfully. Oct 2 19:34:09.056093 env[1141]: time="2023-10-02T19:34:09.056014332Z" level=info msg="shim disconnected" id=456609e8300b4610c61b900e649306fc97c0a0ea9152d0a62d040eec2bd053ca Oct 2 19:34:09.056360 env[1141]: time="2023-10-02T19:34:09.056339453Z" level=warning msg="cleaning up after shim disconnected" id=456609e8300b4610c61b900e649306fc97c0a0ea9152d0a62d040eec2bd053ca namespace=k8s.io Oct 2 19:34:09.056517 env[1141]: time="2023-10-02T19:34:09.056493054Z" level=info msg="cleaning up dead shim" Oct 2 19:34:09.065134 env[1141]: time="2023-10-02T19:34:09.065074174Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:34:09Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3140 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:34:09Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/456609e8300b4610c61b900e649306fc97c0a0ea9152d0a62d040eec2bd053ca/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:34:09.065575 env[1141]: time="2023-10-02T19:34:09.065518017Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 19:34:09.066070 env[1141]: time="2023-10-02T19:34:09.065790898Z" level=error msg="Failed to pipe stdout of container \"456609e8300b4610c61b900e649306fc97c0a0ea9152d0a62d040eec2bd053ca\"" error="reading from a closed fifo" Oct 2 19:34:09.066249 env[1141]: time="2023-10-02T19:34:09.065843058Z" level=error msg="Failed to pipe stderr of container \"456609e8300b4610c61b900e649306fc97c0a0ea9152d0a62d040eec2bd053ca\"" error="reading from a closed fifo" Oct 2 19:34:09.067443 env[1141]: time="2023-10-02T19:34:09.067392745Z" level=error msg="StartContainer for \"456609e8300b4610c61b900e649306fc97c0a0ea9152d0a62d040eec2bd053ca\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:34:09.067941 kubelet[2004]: E1002 19:34:09.067757 2004 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="456609e8300b4610c61b900e649306fc97c0a0ea9152d0a62d040eec2bd053ca" Oct 2 19:34:09.067941 kubelet[2004]: E1002 19:34:09.067873 2004 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:34:09.067941 kubelet[2004]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:34:09.067941 kubelet[2004]: rm /hostbin/cilium-mount Oct 2 19:34:09.067941 kubelet[2004]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-f6ctj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-2c9w4_kube-system(64c19431-34e1-441b-b8f1-e183c03b3d62): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:34:09.067941 kubelet[2004]: E1002 19:34:09.067921 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-2c9w4" podUID=64c19431-34e1-441b-b8f1-e183c03b3d62 Oct 2 19:34:09.452465 systemd[1]: run-containerd-runc-k8s.io-5d50b3f84f6d8a4cf0dc8fc3940002ae7642c2421b87b01dfe7ec3aee87c4304-runc.9ymNWz.mount: Deactivated successfully. Oct 2 19:34:09.637609 kubelet[2004]: E1002 19:34:09.634654 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:09.637764 env[1141]: time="2023-10-02T19:34:09.636888921Z" level=info msg="CreateContainer within sandbox \"5d50b3f84f6d8a4cf0dc8fc3940002ae7642c2421b87b01dfe7ec3aee87c4304\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:34:09.649039 env[1141]: time="2023-10-02T19:34:09.648990978Z" level=info msg="CreateContainer within sandbox \"5d50b3f84f6d8a4cf0dc8fc3940002ae7642c2421b87b01dfe7ec3aee87c4304\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4\"" Oct 2 19:34:09.649508 env[1141]: time="2023-10-02T19:34:09.649479500Z" level=info msg="StartContainer for \"3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4\"" Oct 2 19:34:09.669167 systemd[1]: Started cri-containerd-3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4.scope. Oct 2 19:34:09.686022 systemd[1]: cri-containerd-3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4.scope: Deactivated successfully. Oct 2 19:34:09.693355 env[1141]: time="2023-10-02T19:34:09.693300748Z" level=info msg="shim disconnected" id=3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4 Oct 2 19:34:09.693610 env[1141]: time="2023-10-02T19:34:09.693588829Z" level=warning msg="cleaning up after shim disconnected" id=3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4 namespace=k8s.io Oct 2 19:34:09.693697 env[1141]: time="2023-10-02T19:34:09.693682469Z" level=info msg="cleaning up dead shim" Oct 2 19:34:09.703785 env[1141]: time="2023-10-02T19:34:09.703375435Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:34:09Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3177 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:34:09Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:34:09.704281 env[1141]: time="2023-10-02T19:34:09.704215079Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 19:34:09.705238 env[1141]: time="2023-10-02T19:34:09.705174764Z" level=error msg="Failed to pipe stdout of container \"3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4\"" error="reading from a closed fifo" Oct 2 19:34:09.707219 env[1141]: time="2023-10-02T19:34:09.707181333Z" level=error msg="Failed to pipe stderr of container \"3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4\"" error="reading from a closed fifo" Oct 2 19:34:09.708885 env[1141]: time="2023-10-02T19:34:09.708832821Z" level=error msg="StartContainer for \"3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:34:09.709200 kubelet[2004]: E1002 19:34:09.709083 2004 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4" Oct 2 19:34:09.709383 kubelet[2004]: E1002 19:34:09.709271 2004 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:34:09.709383 kubelet[2004]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:34:09.709383 kubelet[2004]: rm /hostbin/cilium-mount Oct 2 19:34:09.709383 kubelet[2004]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-f6ctj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-2c9w4_kube-system(64c19431-34e1-441b-b8f1-e183c03b3d62): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:34:09.709383 kubelet[2004]: E1002 19:34:09.709307 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-2c9w4" podUID=64c19431-34e1-441b-b8f1-e183c03b3d62 Oct 2 19:34:10.452524 systemd[1]: run-containerd-runc-k8s.io-3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4-runc.1uEIv6.mount: Deactivated successfully. Oct 2 19:34:10.452637 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4-rootfs.mount: Deactivated successfully. Oct 2 19:34:10.638421 kubelet[2004]: I1002 19:34:10.638301 2004 scope.go:115] "RemoveContainer" containerID="456609e8300b4610c61b900e649306fc97c0a0ea9152d0a62d040eec2bd053ca" Oct 2 19:34:10.638743 kubelet[2004]: I1002 19:34:10.638642 2004 scope.go:115] "RemoveContainer" containerID="456609e8300b4610c61b900e649306fc97c0a0ea9152d0a62d040eec2bd053ca" Oct 2 19:34:10.639819 env[1141]: time="2023-10-02T19:34:10.639774239Z" level=info msg="RemoveContainer for \"456609e8300b4610c61b900e649306fc97c0a0ea9152d0a62d040eec2bd053ca\"" Oct 2 19:34:10.640176 env[1141]: time="2023-10-02T19:34:10.640119680Z" level=info msg="RemoveContainer for \"456609e8300b4610c61b900e649306fc97c0a0ea9152d0a62d040eec2bd053ca\"" Oct 2 19:34:10.640507 env[1141]: time="2023-10-02T19:34:10.640466962Z" level=error msg="RemoveContainer for \"456609e8300b4610c61b900e649306fc97c0a0ea9152d0a62d040eec2bd053ca\" failed" error="failed to set removing state for container \"456609e8300b4610c61b900e649306fc97c0a0ea9152d0a62d040eec2bd053ca\": container is already in removing state" Oct 2 19:34:10.641221 kubelet[2004]: E1002 19:34:10.640646 2004 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"456609e8300b4610c61b900e649306fc97c0a0ea9152d0a62d040eec2bd053ca\": container is already in removing state" containerID="456609e8300b4610c61b900e649306fc97c0a0ea9152d0a62d040eec2bd053ca" Oct 2 19:34:10.641221 kubelet[2004]: E1002 19:34:10.640679 2004 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "456609e8300b4610c61b900e649306fc97c0a0ea9152d0a62d040eec2bd053ca": container is already in removing state; Skipping pod "cilium-2c9w4_kube-system(64c19431-34e1-441b-b8f1-e183c03b3d62)" Oct 2 19:34:10.641221 kubelet[2004]: E1002 19:34:10.640742 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:10.641221 kubelet[2004]: E1002 19:34:10.640955 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-2c9w4_kube-system(64c19431-34e1-441b-b8f1-e183c03b3d62)\"" pod="kube-system/cilium-2c9w4" podUID=64c19431-34e1-441b-b8f1-e183c03b3d62 Oct 2 19:34:10.643613 env[1141]: time="2023-10-02T19:34:10.643569897Z" level=info msg="RemoveContainer for \"456609e8300b4610c61b900e649306fc97c0a0ea9152d0a62d040eec2bd053ca\" returns successfully" Oct 2 19:34:12.162073 kubelet[2004]: W1002 19:34:12.162028 2004 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod64c19431_34e1_441b_b8f1_e183c03b3d62.slice/cri-containerd-456609e8300b4610c61b900e649306fc97c0a0ea9152d0a62d040eec2bd053ca.scope WatchSource:0}: container "456609e8300b4610c61b900e649306fc97c0a0ea9152d0a62d040eec2bd053ca" in namespace "k8s.io": not found Oct 2 19:34:12.267642 kubelet[2004]: E1002 19:34:12.267618 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:13.149291 kubelet[2004]: E1002 19:34:13.149257 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:15.147871 kubelet[2004]: E1002 19:34:15.147841 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:15.271097 kubelet[2004]: W1002 19:34:15.270916 2004 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod64c19431_34e1_441b_b8f1_e183c03b3d62.slice/cri-containerd-3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4.scope WatchSource:0}: task 3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4 not found: not found Oct 2 19:34:16.147611 kubelet[2004]: E1002 19:34:16.147575 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:17.268863 kubelet[2004]: E1002 19:34:17.268818 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:19.220000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:19.221620 kernel: kauditd_printk_skb: 47 callbacks suppressed Oct 2 19:34:19.221687 kernel: audit: type=1400 audit(1696275259.220:1332): avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:19.220000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:19.231175 kernel: audit: type=1400 audit(1696275259.220:1333): avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:19.231274 kernel: audit: type=1300 audit(1696275259.220:1333): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c1ff00 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:34:19.220000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c1ff00 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:34:19.220000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:19.238402 kernel: audit: type=1327 audit(1696275259.220:1333): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:19.238492 kernel: audit: type=1400 audit(1696275259.220:1334): avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:19.220000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:19.220000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000bf3720 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:34:19.245392 kernel: audit: type=1300 audit(1696275259.220:1334): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000bf3720 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:34:19.245482 kernel: audit: type=1327 audit(1696275259.220:1334): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:19.220000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:19.220000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:19.251642 kernel: audit: type=1400 audit(1696275259.220:1335): avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:19.251707 kernel: audit: type=1300 audit(1696275259.220:1335): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4002453020 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:34:19.220000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4002453020 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:34:19.220000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:19.259356 kernel: audit: type=1327 audit(1696275259.220:1335): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:19.220000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40018847c0 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:34:19.220000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:22.270865 kubelet[2004]: E1002 19:34:22.270831 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:25.148329 kubelet[2004]: E1002 19:34:25.148300 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:25.151105 env[1141]: time="2023-10-02T19:34:25.151052023Z" level=info msg="CreateContainer within sandbox \"5d50b3f84f6d8a4cf0dc8fc3940002ae7642c2421b87b01dfe7ec3aee87c4304\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:34:25.165457 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1747332190.mount: Deactivated successfully. Oct 2 19:34:25.172081 env[1141]: time="2023-10-02T19:34:25.172029149Z" level=info msg="CreateContainer within sandbox \"5d50b3f84f6d8a4cf0dc8fc3940002ae7642c2421b87b01dfe7ec3aee87c4304\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"f156042dd308848f5afe53b6e53987aad5aed6cbc6977168451f29a83010198d\"" Oct 2 19:34:25.172652 env[1141]: time="2023-10-02T19:34:25.172612351Z" level=info msg="StartContainer for \"f156042dd308848f5afe53b6e53987aad5aed6cbc6977168451f29a83010198d\"" Oct 2 19:34:25.193807 systemd[1]: Started cri-containerd-f156042dd308848f5afe53b6e53987aad5aed6cbc6977168451f29a83010198d.scope. Oct 2 19:34:25.212511 systemd[1]: cri-containerd-f156042dd308848f5afe53b6e53987aad5aed6cbc6977168451f29a83010198d.scope: Deactivated successfully. Oct 2 19:34:25.226327 env[1141]: time="2023-10-02T19:34:25.226258691Z" level=info msg="shim disconnected" id=f156042dd308848f5afe53b6e53987aad5aed6cbc6977168451f29a83010198d Oct 2 19:34:25.226327 env[1141]: time="2023-10-02T19:34:25.226309132Z" level=warning msg="cleaning up after shim disconnected" id=f156042dd308848f5afe53b6e53987aad5aed6cbc6977168451f29a83010198d namespace=k8s.io Oct 2 19:34:25.226327 env[1141]: time="2023-10-02T19:34:25.226318532Z" level=info msg="cleaning up dead shim" Oct 2 19:34:25.236030 env[1141]: time="2023-10-02T19:34:25.235959891Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:34:25Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3216 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:34:25Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f156042dd308848f5afe53b6e53987aad5aed6cbc6977168451f29a83010198d/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:34:25.236270 env[1141]: time="2023-10-02T19:34:25.236222572Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 19:34:25.236442 env[1141]: time="2023-10-02T19:34:25.236384293Z" level=error msg="Failed to pipe stdout of container \"f156042dd308848f5afe53b6e53987aad5aed6cbc6977168451f29a83010198d\"" error="reading from a closed fifo" Oct 2 19:34:25.236714 env[1141]: time="2023-10-02T19:34:25.236530573Z" level=error msg="Failed to pipe stderr of container \"f156042dd308848f5afe53b6e53987aad5aed6cbc6977168451f29a83010198d\"" error="reading from a closed fifo" Oct 2 19:34:25.238135 env[1141]: time="2023-10-02T19:34:25.238079100Z" level=error msg="StartContainer for \"f156042dd308848f5afe53b6e53987aad5aed6cbc6977168451f29a83010198d\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:34:25.238355 kubelet[2004]: E1002 19:34:25.238320 2004 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f156042dd308848f5afe53b6e53987aad5aed6cbc6977168451f29a83010198d" Oct 2 19:34:25.238509 kubelet[2004]: E1002 19:34:25.238494 2004 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:34:25.238509 kubelet[2004]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:34:25.238509 kubelet[2004]: rm /hostbin/cilium-mount Oct 2 19:34:25.238509 kubelet[2004]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-f6ctj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-2c9w4_kube-system(64c19431-34e1-441b-b8f1-e183c03b3d62): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:34:25.238646 kubelet[2004]: E1002 19:34:25.238538 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-2c9w4" podUID=64c19431-34e1-441b-b8f1-e183c03b3d62 Oct 2 19:34:25.667498 kubelet[2004]: I1002 19:34:25.667377 2004 scope.go:115] "RemoveContainer" containerID="3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4" Oct 2 19:34:25.668379 env[1141]: time="2023-10-02T19:34:25.668341224Z" level=info msg="RemoveContainer for \"3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4\"" Oct 2 19:34:25.669437 kubelet[2004]: I1002 19:34:25.669303 2004 scope.go:115] "RemoveContainer" containerID="3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4" Oct 2 19:34:25.671017 env[1141]: time="2023-10-02T19:34:25.670972235Z" level=info msg="RemoveContainer for \"3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4\" returns successfully" Oct 2 19:34:25.671226 env[1141]: time="2023-10-02T19:34:25.671160276Z" level=error msg="ContainerStatus for \"3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4\": not found" Oct 2 19:34:25.671360 kubelet[2004]: E1002 19:34:25.671336 2004 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4\": not found" containerID="3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4" Oct 2 19:34:25.671416 kubelet[2004]: E1002 19:34:25.671394 2004 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": failed to get container status "3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4": rpc error: code = NotFound desc = an error occurred when try to find container "3824d8c9598c5f8019d9b89b35bac9e7e65e8296b78896f3998324c9628629e4": not found; Skipping pod "cilium-2c9w4_kube-system(64c19431-34e1-441b-b8f1-e183c03b3d62)" Oct 2 19:34:25.671569 kubelet[2004]: E1002 19:34:25.671548 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:25.671913 kubelet[2004]: E1002 19:34:25.671811 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-2c9w4_kube-system(64c19431-34e1-441b-b8f1-e183c03b3d62)\"" pod="kube-system/cilium-2c9w4" podUID=64c19431-34e1-441b-b8f1-e183c03b3d62 Oct 2 19:34:26.159575 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f156042dd308848f5afe53b6e53987aad5aed6cbc6977168451f29a83010198d-rootfs.mount: Deactivated successfully. Oct 2 19:34:27.271956 kubelet[2004]: E1002 19:34:27.271916 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:28.332431 kubelet[2004]: W1002 19:34:28.332385 2004 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod64c19431_34e1_441b_b8f1_e183c03b3d62.slice/cri-containerd-f156042dd308848f5afe53b6e53987aad5aed6cbc6977168451f29a83010198d.scope WatchSource:0}: task f156042dd308848f5afe53b6e53987aad5aed6cbc6977168451f29a83010198d not found: not found Oct 2 19:34:32.273252 kubelet[2004]: E1002 19:34:32.273222 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:37.275181 kubelet[2004]: E1002 19:34:37.275146 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:38.148491 kubelet[2004]: E1002 19:34:38.148458 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:38.148697 kubelet[2004]: E1002 19:34:38.148681 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-2c9w4_kube-system(64c19431-34e1-441b-b8f1-e183c03b3d62)\"" pod="kube-system/cilium-2c9w4" podUID=64c19431-34e1-441b-b8f1-e183c03b3d62 Oct 2 19:34:42.275689 kubelet[2004]: E1002 19:34:42.275650 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:47.276745 kubelet[2004]: E1002 19:34:47.276715 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:52.148561 kubelet[2004]: E1002 19:34:52.148525 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:52.151118 env[1141]: time="2023-10-02T19:34:52.150979346Z" level=info msg="CreateContainer within sandbox \"5d50b3f84f6d8a4cf0dc8fc3940002ae7642c2421b87b01dfe7ec3aee87c4304\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:34:52.160549 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4210134960.mount: Deactivated successfully. Oct 2 19:34:52.164984 env[1141]: time="2023-10-02T19:34:52.164934912Z" level=info msg="CreateContainer within sandbox \"5d50b3f84f6d8a4cf0dc8fc3940002ae7642c2421b87b01dfe7ec3aee87c4304\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"fd120bd0da016cb4ebbed4e896833efab73c19ac9a2d94286300ab295018612a\"" Oct 2 19:34:52.165995 env[1141]: time="2023-10-02T19:34:52.165966836Z" level=info msg="StartContainer for \"fd120bd0da016cb4ebbed4e896833efab73c19ac9a2d94286300ab295018612a\"" Oct 2 19:34:52.186552 systemd[1]: Started cri-containerd-fd120bd0da016cb4ebbed4e896833efab73c19ac9a2d94286300ab295018612a.scope. Oct 2 19:34:52.202198 systemd[1]: cri-containerd-fd120bd0da016cb4ebbed4e896833efab73c19ac9a2d94286300ab295018612a.scope: Deactivated successfully. Oct 2 19:34:52.215690 env[1141]: time="2023-10-02T19:34:52.215642722Z" level=info msg="shim disconnected" id=fd120bd0da016cb4ebbed4e896833efab73c19ac9a2d94286300ab295018612a Oct 2 19:34:52.216049 env[1141]: time="2023-10-02T19:34:52.216029283Z" level=warning msg="cleaning up after shim disconnected" id=fd120bd0da016cb4ebbed4e896833efab73c19ac9a2d94286300ab295018612a namespace=k8s.io Oct 2 19:34:52.216139 env[1141]: time="2023-10-02T19:34:52.216124043Z" level=info msg="cleaning up dead shim" Oct 2 19:34:52.225874 env[1141]: time="2023-10-02T19:34:52.225825876Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:34:52Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3253 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:34:52Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/fd120bd0da016cb4ebbed4e896833efab73c19ac9a2d94286300ab295018612a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:34:52.226299 env[1141]: time="2023-10-02T19:34:52.226241117Z" level=error msg="copy shim log" error="read /proc/self/fd/39: file already closed" Oct 2 19:34:52.226830 env[1141]: time="2023-10-02T19:34:52.226620118Z" level=error msg="Failed to pipe stdout of container \"fd120bd0da016cb4ebbed4e896833efab73c19ac9a2d94286300ab295018612a\"" error="reading from a closed fifo" Oct 2 19:34:52.226830 env[1141]: time="2023-10-02T19:34:52.226638438Z" level=error msg="Failed to pipe stderr of container \"fd120bd0da016cb4ebbed4e896833efab73c19ac9a2d94286300ab295018612a\"" error="reading from a closed fifo" Oct 2 19:34:52.229164 env[1141]: time="2023-10-02T19:34:52.229091167Z" level=error msg="StartContainer for \"fd120bd0da016cb4ebbed4e896833efab73c19ac9a2d94286300ab295018612a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:34:52.229462 kubelet[2004]: E1002 19:34:52.229422 2004 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="fd120bd0da016cb4ebbed4e896833efab73c19ac9a2d94286300ab295018612a" Oct 2 19:34:52.229583 kubelet[2004]: E1002 19:34:52.229554 2004 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:34:52.229583 kubelet[2004]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:34:52.229583 kubelet[2004]: rm /hostbin/cilium-mount Oct 2 19:34:52.229583 kubelet[2004]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-f6ctj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-2c9w4_kube-system(64c19431-34e1-441b-b8f1-e183c03b3d62): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:34:52.229763 kubelet[2004]: E1002 19:34:52.229600 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-2c9w4" podUID=64c19431-34e1-441b-b8f1-e183c03b3d62 Oct 2 19:34:52.277852 kubelet[2004]: E1002 19:34:52.277818 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:52.714989 kubelet[2004]: I1002 19:34:52.714964 2004 scope.go:115] "RemoveContainer" containerID="f156042dd308848f5afe53b6e53987aad5aed6cbc6977168451f29a83010198d" Oct 2 19:34:52.715360 kubelet[2004]: I1002 19:34:52.715331 2004 scope.go:115] "RemoveContainer" containerID="f156042dd308848f5afe53b6e53987aad5aed6cbc6977168451f29a83010198d" Oct 2 19:34:52.717691 env[1141]: time="2023-10-02T19:34:52.717654117Z" level=info msg="RemoveContainer for \"f156042dd308848f5afe53b6e53987aad5aed6cbc6977168451f29a83010198d\"" Oct 2 19:34:52.721453 env[1141]: time="2023-10-02T19:34:52.721401730Z" level=info msg="RemoveContainer for \"f156042dd308848f5afe53b6e53987aad5aed6cbc6977168451f29a83010198d\" returns successfully" Oct 2 19:34:52.722382 env[1141]: time="2023-10-02T19:34:52.722313213Z" level=info msg="RemoveContainer for \"f156042dd308848f5afe53b6e53987aad5aed6cbc6977168451f29a83010198d\"" Oct 2 19:34:52.722472 env[1141]: time="2023-10-02T19:34:52.722395493Z" level=info msg="RemoveContainer for \"f156042dd308848f5afe53b6e53987aad5aed6cbc6977168451f29a83010198d\" returns successfully" Oct 2 19:34:52.722725 kubelet[2004]: E1002 19:34:52.722701 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:52.723355 kubelet[2004]: E1002 19:34:52.723290 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-2c9w4_kube-system(64c19431-34e1-441b-b8f1-e183c03b3d62)\"" pod="kube-system/cilium-2c9w4" podUID=64c19431-34e1-441b-b8f1-e183c03b3d62 Oct 2 19:34:53.158790 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-fd120bd0da016cb4ebbed4e896833efab73c19ac9a2d94286300ab295018612a-rootfs.mount: Deactivated successfully. Oct 2 19:34:55.321174 kubelet[2004]: W1002 19:34:55.321127 2004 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod64c19431_34e1_441b_b8f1_e183c03b3d62.slice/cri-containerd-fd120bd0da016cb4ebbed4e896833efab73c19ac9a2d94286300ab295018612a.scope WatchSource:0}: task fd120bd0da016cb4ebbed4e896833efab73c19ac9a2d94286300ab295018612a not found: not found Oct 2 19:34:57.280298 kubelet[2004]: E1002 19:34:57.280267 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:02.281590 kubelet[2004]: E1002 19:35:02.281558 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:03.766000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:03.767746 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:35:03.767804 kernel: audit: type=1400 audit(1696275303.766:1336): avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:03.766000 audit[1890]: AVC avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:03.773564 kernel: audit: type=1400 audit(1696275303.766:1337): avc: denied { watch } for pid=1890 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:03.773622 kernel: audit: type=1300 audit(1696275303.766:1337): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40002b9260 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:35:03.766000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40002b9260 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:35:03.766000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:03.780440 kernel: audit: type=1327 audit(1696275303.766:1337): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:03.780517 kernel: audit: type=1300 audit(1696275303.766:1336): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002201d40 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:35:03.766000 audit[1890]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002201d40 a2=fc6 a3=0 items=0 ppid=1723 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c867 key=(null) Oct 2 19:35:03.766000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:03.787355 kernel: audit: type=1327 audit(1696275303.766:1336): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:04.038000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:04.038000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400aa9e180 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:35:04.046696 kernel: audit: type=1400 audit(1696275304.038:1338): avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:04.046760 kernel: audit: type=1300 audit(1696275304.038:1338): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400aa9e180 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:35:04.038000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:35:04.038000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:04.053303 kernel: audit: type=1327 audit(1696275304.038:1338): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:35:04.053355 kernel: audit: type=1400 audit(1696275304.038:1339): avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:04.038000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400ab8a320 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:35:04.038000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:35:04.045000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:04.045000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4003173170 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:35:04.045000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:35:04.052000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6811 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:04.052000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40031731a0 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:35:04.052000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:35:04.058000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:04.058000 audit[1886]: AVC avc: denied { watch } for pid=1886 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:04.058000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4007e5a0a0 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:35:04.058000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:35:04.058000 audit[1886]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4003ded800 a2=fc6 a3=0 items=0 ppid=1724 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c299,c383 key=(null) Oct 2 19:35:04.058000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:35:05.148313 kubelet[2004]: E1002 19:35:05.148150 2004 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:35:05.148672 kubelet[2004]: E1002 19:35:05.148565 2004 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-2c9w4_kube-system(64c19431-34e1-441b-b8f1-e183c03b3d62)\"" pod="kube-system/cilium-2c9w4" podUID=64c19431-34e1-441b-b8f1-e183c03b3d62 Oct 2 19:35:07.187455 kubelet[2004]: W1002 19:35:07.187411 2004 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:35:07.282243 kubelet[2004]: E1002 19:35:07.282211 2004 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:07.939188 env[1141]: time="2023-10-02T19:35:07.939126865Z" level=info msg="StopPodSandbox for \"5d50b3f84f6d8a4cf0dc8fc3940002ae7642c2421b87b01dfe7ec3aee87c4304\"" Oct 2 19:35:07.939637 env[1141]: time="2023-10-02T19:35:07.939204545Z" level=info msg="Container to stop \"fd120bd0da016cb4ebbed4e896833efab73c19ac9a2d94286300ab295018612a\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:35:07.940527 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-5d50b3f84f6d8a4cf0dc8fc3940002ae7642c2421b87b01dfe7ec3aee87c4304-shm.mount: Deactivated successfully. Oct 2 19:35:07.949710 systemd[1]: cri-containerd-5d50b3f84f6d8a4cf0dc8fc3940002ae7642c2421b87b01dfe7ec3aee87c4304.scope: Deactivated successfully. Oct 2 19:35:07.948000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:35:07.964000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:35:07.997000 audit[3056]: USER_END pid=3056 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:07.997000 audit[3056]: CRED_DISP pid=3056 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:07.999000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.8:22-10.0.0.1:51560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:07.997281 sshd[3056]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:07.999848 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5d50b3f84f6d8a4cf0dc8fc3940002ae7642c2421b87b01dfe7ec3aee87c4304-rootfs.mount: Deactivated successfully. Oct 2 19:35:08.000519 systemd[1]: sshd@29-10.0.0.8:22-10.0.0.1:51560.service: Deactivated successfully. Oct 2 19:35:08.001141 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:35:08.001817 systemd-logind[1131]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:35:08.002707 systemd-logind[1131]: Removed session 30. Oct 2 19:35:08.012836 env[1141]: time="2023-10-02T19:35:08.012770408Z" level=info msg="shim disconnected" id=5d50b3f84f6d8a4cf0dc8fc3940002ae7642c2421b87b01dfe7ec3aee87c4304 Oct 2 19:35:08.012978 env[1141]: time="2023-10-02T19:35:08.012836169Z" level=warning msg="cleaning up after shim disconnected" id=5d50b3f84f6d8a4cf0dc8fc3940002ae7642c2421b87b01dfe7ec3aee87c4304 namespace=k8s.io Oct 2 19:35:08.012978 env[1141]: time="2023-10-02T19:35:08.012850609Z" level=info msg="cleaning up dead shim" Oct 2 19:35:08.021591 env[1141]: time="2023-10-02T19:35:08.021542115Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:35:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3288 runtime=io.containerd.runc.v2\n" Oct 2 19:35:08.021901 env[1141]: time="2023-10-02T19:35:08.021871276Z" level=info msg="TearDown network for sandbox \"5d50b3f84f6d8a4cf0dc8fc3940002ae7642c2421b87b01dfe7ec3aee87c4304\" successfully" Oct 2 19:35:08.021958 env[1141]: time="2023-10-02T19:35:08.021899756Z" level=info msg="StopPodSandbox for \"5d50b3f84f6d8a4cf0dc8fc3940002ae7642c2421b87b01dfe7ec3aee87c4304\" returns successfully" Oct 2 19:35:08.105641 kubelet[2004]: I1002 19:35:08.105552 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-f6ctj\" (UniqueName: \"kubernetes.io/projected/64c19431-34e1-441b-b8f1-e183c03b3d62-kube-api-access-f6ctj\") pod \"64c19431-34e1-441b-b8f1-e183c03b3d62\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " Oct 2 19:35:08.106533 kubelet[2004]: I1002 19:35:08.105925 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-xtables-lock\") pod \"64c19431-34e1-441b-b8f1-e183c03b3d62\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " Oct 2 19:35:08.106533 kubelet[2004]: I1002 19:35:08.105959 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/64c19431-34e1-441b-b8f1-e183c03b3d62-cilium-config-path\") pod \"64c19431-34e1-441b-b8f1-e183c03b3d62\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " Oct 2 19:35:08.106533 kubelet[2004]: I1002 19:35:08.105982 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/64c19431-34e1-441b-b8f1-e183c03b3d62-clustermesh-secrets\") pod \"64c19431-34e1-441b-b8f1-e183c03b3d62\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " Oct 2 19:35:08.106533 kubelet[2004]: I1002 19:35:08.105999 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-cilium-run\") pod \"64c19431-34e1-441b-b8f1-e183c03b3d62\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " Oct 2 19:35:08.106533 kubelet[2004]: I1002 19:35:08.106016 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-lib-modules\") pod \"64c19431-34e1-441b-b8f1-e183c03b3d62\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " Oct 2 19:35:08.106533 kubelet[2004]: I1002 19:35:08.106016 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "64c19431-34e1-441b-b8f1-e183c03b3d62" (UID: "64c19431-34e1-441b-b8f1-e183c03b3d62"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:35:08.106533 kubelet[2004]: I1002 19:35:08.106035 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-host-proc-sys-net\") pod \"64c19431-34e1-441b-b8f1-e183c03b3d62\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " Oct 2 19:35:08.106533 kubelet[2004]: I1002 19:35:08.106082 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-etc-cni-netd\") pod \"64c19431-34e1-441b-b8f1-e183c03b3d62\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " Oct 2 19:35:08.106533 kubelet[2004]: I1002 19:35:08.106104 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-host-proc-sys-kernel\") pod \"64c19431-34e1-441b-b8f1-e183c03b3d62\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " Oct 2 19:35:08.106533 kubelet[2004]: I1002 19:35:08.106142 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-bpf-maps\") pod \"64c19431-34e1-441b-b8f1-e183c03b3d62\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " Oct 2 19:35:08.106533 kubelet[2004]: I1002 19:35:08.106165 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/64c19431-34e1-441b-b8f1-e183c03b3d62-cilium-ipsec-secrets\") pod \"64c19431-34e1-441b-b8f1-e183c03b3d62\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " Oct 2 19:35:08.106533 kubelet[2004]: I1002 19:35:08.106184 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-hostproc\") pod \"64c19431-34e1-441b-b8f1-e183c03b3d62\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " Oct 2 19:35:08.106533 kubelet[2004]: I1002 19:35:08.106206 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/64c19431-34e1-441b-b8f1-e183c03b3d62-hubble-tls\") pod \"64c19431-34e1-441b-b8f1-e183c03b3d62\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " Oct 2 19:35:08.106533 kubelet[2004]: I1002 19:35:08.106222 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-cilium-cgroup\") pod \"64c19431-34e1-441b-b8f1-e183c03b3d62\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " Oct 2 19:35:08.106533 kubelet[2004]: W1002 19:35:08.106213 2004 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/64c19431-34e1-441b-b8f1-e183c03b3d62/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:35:08.106533 kubelet[2004]: I1002 19:35:08.106239 2004 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-cni-path\") pod \"64c19431-34e1-441b-b8f1-e183c03b3d62\" (UID: \"64c19431-34e1-441b-b8f1-e183c03b3d62\") " Oct 2 19:35:08.107054 kubelet[2004]: I1002 19:35:08.106245 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "64c19431-34e1-441b-b8f1-e183c03b3d62" (UID: "64c19431-34e1-441b-b8f1-e183c03b3d62"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:35:08.107054 kubelet[2004]: I1002 19:35:08.106278 2004 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 19:35:08.107054 kubelet[2004]: I1002 19:35:08.106291 2004 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 19:35:08.107054 kubelet[2004]: I1002 19:35:08.106309 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-hostproc" (OuterVolumeSpecName: "hostproc") pod "64c19431-34e1-441b-b8f1-e183c03b3d62" (UID: "64c19431-34e1-441b-b8f1-e183c03b3d62"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:35:08.107054 kubelet[2004]: I1002 19:35:08.106048 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "64c19431-34e1-441b-b8f1-e183c03b3d62" (UID: "64c19431-34e1-441b-b8f1-e183c03b3d62"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:35:08.107054 kubelet[2004]: I1002 19:35:08.106409 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "64c19431-34e1-441b-b8f1-e183c03b3d62" (UID: "64c19431-34e1-441b-b8f1-e183c03b3d62"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:35:08.107054 kubelet[2004]: I1002 19:35:08.106429 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "64c19431-34e1-441b-b8f1-e183c03b3d62" (UID: "64c19431-34e1-441b-b8f1-e183c03b3d62"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:35:08.107054 kubelet[2004]: I1002 19:35:08.106446 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "64c19431-34e1-441b-b8f1-e183c03b3d62" (UID: "64c19431-34e1-441b-b8f1-e183c03b3d62"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:35:08.107054 kubelet[2004]: I1002 19:35:08.106462 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "64c19431-34e1-441b-b8f1-e183c03b3d62" (UID: "64c19431-34e1-441b-b8f1-e183c03b3d62"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:35:08.107054 kubelet[2004]: I1002 19:35:08.106478 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-cni-path" (OuterVolumeSpecName: "cni-path") pod "64c19431-34e1-441b-b8f1-e183c03b3d62" (UID: "64c19431-34e1-441b-b8f1-e183c03b3d62"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:35:08.107054 kubelet[2004]: I1002 19:35:08.106232 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "64c19431-34e1-441b-b8f1-e183c03b3d62" (UID: "64c19431-34e1-441b-b8f1-e183c03b3d62"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:35:08.108405 kubelet[2004]: I1002 19:35:08.108358 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/64c19431-34e1-441b-b8f1-e183c03b3d62-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "64c19431-34e1-441b-b8f1-e183c03b3d62" (UID: "64c19431-34e1-441b-b8f1-e183c03b3d62"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:35:08.111767 kubelet[2004]: I1002 19:35:08.109705 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/64c19431-34e1-441b-b8f1-e183c03b3d62-kube-api-access-f6ctj" (OuterVolumeSpecName: "kube-api-access-f6ctj") pod "64c19431-34e1-441b-b8f1-e183c03b3d62" (UID: "64c19431-34e1-441b-b8f1-e183c03b3d62"). InnerVolumeSpecName "kube-api-access-f6ctj". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:35:08.111767 kubelet[2004]: I1002 19:35:08.109927 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/64c19431-34e1-441b-b8f1-e183c03b3d62-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "64c19431-34e1-441b-b8f1-e183c03b3d62" (UID: "64c19431-34e1-441b-b8f1-e183c03b3d62"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:35:08.109988 systemd[1]: var-lib-kubelet-pods-64c19431\x2d34e1\x2d441b\x2db8f1\x2de183c03b3d62-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2df6ctj.mount: Deactivated successfully. Oct 2 19:35:08.111389 systemd[1]: var-lib-kubelet-pods-64c19431\x2d34e1\x2d441b\x2db8f1\x2de183c03b3d62-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:35:08.112728 systemd[1]: var-lib-kubelet-pods-64c19431\x2d34e1\x2d441b\x2db8f1\x2de183c03b3d62-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:35:08.113702 kubelet[2004]: I1002 19:35:08.113675 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/64c19431-34e1-441b-b8f1-e183c03b3d62-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "64c19431-34e1-441b-b8f1-e183c03b3d62" (UID: "64c19431-34e1-441b-b8f1-e183c03b3d62"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:35:08.113818 kubelet[2004]: I1002 19:35:08.113790 2004 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/64c19431-34e1-441b-b8f1-e183c03b3d62-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "64c19431-34e1-441b-b8f1-e183c03b3d62" (UID: "64c19431-34e1-441b-b8f1-e183c03b3d62"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:35:08.207046 kubelet[2004]: I1002 19:35:08.206946 2004 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 19:35:08.207411 kubelet[2004]: I1002 19:35:08.207385 2004 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 19:35:08.207498 kubelet[2004]: I1002 19:35:08.207487 2004 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 19:35:08.207563 kubelet[2004]: I1002 19:35:08.207555 2004 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 19:35:08.207621 kubelet[2004]: I1002 19:35:08.207613 2004 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 19:35:08.207671 kubelet[2004]: I1002 19:35:08.207664 2004 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/64c19431-34e1-441b-b8f1-e183c03b3d62-cilium-ipsec-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:35:08.207724 kubelet[2004]: I1002 19:35:08.207717 2004 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 19:35:08.207779 kubelet[2004]: I1002 19:35:08.207771 2004 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/64c19431-34e1-441b-b8f1-e183c03b3d62-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 19:35:08.207837 kubelet[2004]: I1002 19:35:08.207829 2004 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 19:35:08.207944 kubelet[2004]: I1002 19:35:08.207934 2004 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/64c19431-34e1-441b-b8f1-e183c03b3d62-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:35:08.208022 kubelet[2004]: I1002 19:35:08.208009 2004 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-f6ctj\" (UniqueName: \"kubernetes.io/projected/64c19431-34e1-441b-b8f1-e183c03b3d62-kube-api-access-f6ctj\") on node \"localhost\" DevicePath \"\"" Oct 2 19:35:08.208076 kubelet[2004]: I1002 19:35:08.208069 2004 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/64c19431-34e1-441b-b8f1-e183c03b3d62-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:35:08.208159 kubelet[2004]: I1002 19:35:08.208149 2004 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/64c19431-34e1-441b-b8f1-e183c03b3d62-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:35:08.751574 kubelet[2004]: I1002 19:35:08.751543 2004 scope.go:115] "RemoveContainer" containerID="fd120bd0da016cb4ebbed4e896833efab73c19ac9a2d94286300ab295018612a" Oct 2 19:35:08.756196 env[1141]: time="2023-10-02T19:35:08.756157091Z" level=info msg="RemoveContainer for \"fd120bd0da016cb4ebbed4e896833efab73c19ac9a2d94286300ab295018612a\"" Oct 2 19:35:08.758787 env[1141]: time="2023-10-02T19:35:08.758749139Z" level=info msg="RemoveContainer for \"fd120bd0da016cb4ebbed4e896833efab73c19ac9a2d94286300ab295018612a\" returns successfully" Oct 2 19:35:08.770238 systemd[1]: Removed slice kubepods-burstable-pod64c19431_34e1_441b_b8f1_e183c03b3d62.slice. Oct 2 19:35:08.940588 systemd[1]: var-lib-kubelet-pods-64c19431\x2d34e1\x2d441b\x2db8f1\x2de183c03b3d62-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:35:09.150243 kubelet[2004]: I1002 19:35:09.150208 2004 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=64c19431-34e1-441b-b8f1-e183c03b3d62 path="/var/lib/kubelet/pods/64c19431-34e1-441b-b8f1-e183c03b3d62/volumes"