Oct 2 19:47:32.761496 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Oct 2 19:47:32.761516 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 19:47:32.761524 kernel: efi: EFI v2.70 by EDK II Oct 2 19:47:32.761530 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Oct 2 19:47:32.761535 kernel: random: crng init done Oct 2 19:47:32.761540 kernel: ACPI: Early table checksum verification disabled Oct 2 19:47:32.761546 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Oct 2 19:47:32.761553 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Oct 2 19:47:32.761558 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:47:32.761564 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:47:32.761569 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:47:32.761574 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:47:32.761579 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:47:32.761585 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:47:32.761592 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:47:32.761598 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:47:32.761604 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:47:32.761610 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Oct 2 19:47:32.761615 kernel: NUMA: Failed to initialise from firmware Oct 2 19:47:32.761621 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 19:47:32.761627 kernel: NUMA: NODE_DATA [mem 0xdcb0c900-0xdcb11fff] Oct 2 19:47:32.761633 kernel: Zone ranges: Oct 2 19:47:32.761638 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 19:47:32.761645 kernel: DMA32 empty Oct 2 19:47:32.761651 kernel: Normal empty Oct 2 19:47:32.761656 kernel: Movable zone start for each node Oct 2 19:47:32.761661 kernel: Early memory node ranges Oct 2 19:47:32.761667 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Oct 2 19:47:32.761673 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Oct 2 19:47:32.761678 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Oct 2 19:47:32.761684 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Oct 2 19:47:32.761689 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Oct 2 19:47:32.761695 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Oct 2 19:47:32.761700 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Oct 2 19:47:32.761706 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 19:47:32.761712 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Oct 2 19:47:32.761718 kernel: psci: probing for conduit method from ACPI. Oct 2 19:47:32.761723 kernel: psci: PSCIv1.1 detected in firmware. Oct 2 19:47:32.761729 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 19:47:32.761735 kernel: psci: Trusted OS migration not required Oct 2 19:47:32.761743 kernel: psci: SMC Calling Convention v1.1 Oct 2 19:47:32.761749 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Oct 2 19:47:32.761756 kernel: ACPI: SRAT not present Oct 2 19:47:32.761762 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 19:47:32.761768 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 19:47:32.761774 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Oct 2 19:47:32.761780 kernel: Detected PIPT I-cache on CPU0 Oct 2 19:47:32.761786 kernel: CPU features: detected: GIC system register CPU interface Oct 2 19:47:32.761792 kernel: CPU features: detected: Hardware dirty bit management Oct 2 19:47:32.761798 kernel: CPU features: detected: Spectre-v4 Oct 2 19:47:32.761804 kernel: CPU features: detected: Spectre-BHB Oct 2 19:47:32.761811 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 19:47:32.761817 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 19:47:32.761823 kernel: CPU features: detected: ARM erratum 1418040 Oct 2 19:47:32.761829 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Oct 2 19:47:32.761835 kernel: Policy zone: DMA Oct 2 19:47:32.761842 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:47:32.761848 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:47:32.761854 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:47:32.761860 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:47:32.761866 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:47:32.761873 kernel: Memory: 2459284K/2572288K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 113004K reserved, 0K cma-reserved) Oct 2 19:47:32.761880 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 2 19:47:32.761886 kernel: trace event string verifier disabled Oct 2 19:47:32.761892 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 19:47:32.761898 kernel: rcu: RCU event tracing is enabled. Oct 2 19:47:32.761905 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 2 19:47:32.761911 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 19:47:32.761917 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:47:32.761923 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:47:32.761929 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 2 19:47:32.761935 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 19:47:32.761941 kernel: GICv3: 256 SPIs implemented Oct 2 19:47:32.761948 kernel: GICv3: 0 Extended SPIs implemented Oct 2 19:47:32.761954 kernel: GICv3: Distributor has no Range Selector support Oct 2 19:47:32.761960 kernel: Root IRQ handler: gic_handle_irq Oct 2 19:47:32.761966 kernel: GICv3: 16 PPIs implemented Oct 2 19:47:32.761972 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Oct 2 19:47:32.761977 kernel: ACPI: SRAT not present Oct 2 19:47:32.761983 kernel: ITS [mem 0x08080000-0x0809ffff] Oct 2 19:47:32.761989 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Oct 2 19:47:32.761995 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Oct 2 19:47:32.762002 kernel: GICv3: using LPI property table @0x00000000400d0000 Oct 2 19:47:32.762008 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Oct 2 19:47:32.762014 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:47:32.762021 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Oct 2 19:47:32.762027 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Oct 2 19:47:32.762033 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Oct 2 19:47:32.762039 kernel: arm-pv: using stolen time PV Oct 2 19:47:32.762045 kernel: Console: colour dummy device 80x25 Oct 2 19:47:32.762052 kernel: ACPI: Core revision 20210730 Oct 2 19:47:32.762058 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Oct 2 19:47:32.762064 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:47:32.762070 kernel: LSM: Security Framework initializing Oct 2 19:47:32.762077 kernel: SELinux: Initializing. Oct 2 19:47:32.762084 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:47:32.762090 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:47:32.762096 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:47:32.762102 kernel: Platform MSI: ITS@0x8080000 domain created Oct 2 19:47:32.762108 kernel: PCI/MSI: ITS@0x8080000 domain created Oct 2 19:47:32.762114 kernel: Remapping and enabling EFI services. Oct 2 19:47:32.762121 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:47:32.762127 kernel: Detected PIPT I-cache on CPU1 Oct 2 19:47:32.762133 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Oct 2 19:47:32.762140 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Oct 2 19:47:32.762146 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:47:32.762153 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Oct 2 19:47:32.762159 kernel: Detected PIPT I-cache on CPU2 Oct 2 19:47:32.762165 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Oct 2 19:47:32.762172 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Oct 2 19:47:32.762178 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:47:32.762184 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Oct 2 19:47:32.762190 kernel: Detected PIPT I-cache on CPU3 Oct 2 19:47:32.762196 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Oct 2 19:47:32.762204 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Oct 2 19:47:32.762210 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:47:32.762216 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Oct 2 19:47:32.762222 kernel: smp: Brought up 1 node, 4 CPUs Oct 2 19:47:32.762232 kernel: SMP: Total of 4 processors activated. Oct 2 19:47:32.762240 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 19:47:32.762247 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 2 19:47:32.762253 kernel: CPU features: detected: Common not Private translations Oct 2 19:47:32.762259 kernel: CPU features: detected: CRC32 instructions Oct 2 19:47:32.762266 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 2 19:47:32.762272 kernel: CPU features: detected: LSE atomic instructions Oct 2 19:47:32.762279 kernel: CPU features: detected: Privileged Access Never Oct 2 19:47:32.762286 kernel: CPU features: detected: RAS Extension Support Oct 2 19:47:32.762293 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Oct 2 19:47:32.762299 kernel: CPU: All CPU(s) started at EL1 Oct 2 19:47:32.762306 kernel: alternatives: patching kernel code Oct 2 19:47:32.762313 kernel: devtmpfs: initialized Oct 2 19:47:32.762319 kernel: KASLR enabled Oct 2 19:47:32.762326 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:47:32.762333 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 2 19:47:32.762339 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:47:32.762345 kernel: SMBIOS 3.0.0 present. Oct 2 19:47:32.762352 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Oct 2 19:47:32.762359 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:47:32.762365 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 19:47:32.762372 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 19:47:32.762380 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 19:47:32.762386 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:47:32.762393 kernel: audit: type=2000 audit(0.035:1): state=initialized audit_enabled=0 res=1 Oct 2 19:47:32.762399 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:47:32.762406 kernel: cpuidle: using governor menu Oct 2 19:47:32.762412 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 19:47:32.762419 kernel: ASID allocator initialised with 32768 entries Oct 2 19:47:32.762425 kernel: ACPI: bus type PCI registered Oct 2 19:47:32.762432 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:47:32.762449 kernel: Serial: AMBA PL011 UART driver Oct 2 19:47:32.762470 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:47:32.762477 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 19:47:32.762484 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:47:32.762490 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 19:47:32.762497 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:47:32.762503 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 19:47:32.762510 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:47:32.762516 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:47:32.762525 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:47:32.762532 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:47:32.762538 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:47:32.762545 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:47:32.762552 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:47:32.762558 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:47:32.762564 kernel: ACPI: Interpreter enabled Oct 2 19:47:32.762571 kernel: ACPI: Using GIC for interrupt routing Oct 2 19:47:32.762577 kernel: ACPI: MCFG table detected, 1 entries Oct 2 19:47:32.762585 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Oct 2 19:47:32.762592 kernel: printk: console [ttyAMA0] enabled Oct 2 19:47:32.762598 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:47:32.762719 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:47:32.762781 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 2 19:47:32.762840 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 2 19:47:32.762896 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Oct 2 19:47:32.762955 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Oct 2 19:47:32.762964 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Oct 2 19:47:32.762971 kernel: PCI host bridge to bus 0000:00 Oct 2 19:47:32.763037 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Oct 2 19:47:32.763089 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 2 19:47:32.763140 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Oct 2 19:47:32.763191 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:47:32.763262 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Oct 2 19:47:32.763330 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 19:47:32.763389 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Oct 2 19:47:32.763461 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Oct 2 19:47:32.763531 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Oct 2 19:47:32.763590 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Oct 2 19:47:32.763647 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Oct 2 19:47:32.763707 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Oct 2 19:47:32.763760 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Oct 2 19:47:32.763811 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 2 19:47:32.763863 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Oct 2 19:47:32.763871 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 2 19:47:32.763879 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 2 19:47:32.763885 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 2 19:47:32.763893 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 2 19:47:32.763900 kernel: iommu: Default domain type: Translated Oct 2 19:47:32.763906 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 19:47:32.763913 kernel: vgaarb: loaded Oct 2 19:47:32.763919 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:47:32.763926 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:47:32.763932 kernel: PTP clock support registered Oct 2 19:47:32.763938 kernel: Registered efivars operations Oct 2 19:47:32.763945 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 19:47:32.763952 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:47:32.763959 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:47:32.763966 kernel: pnp: PnP ACPI init Oct 2 19:47:32.764037 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Oct 2 19:47:32.764046 kernel: pnp: PnP ACPI: found 1 devices Oct 2 19:47:32.764052 kernel: NET: Registered PF_INET protocol family Oct 2 19:47:32.764059 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:47:32.764066 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:47:32.764073 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:47:32.764081 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:47:32.764087 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:47:32.764094 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:47:32.764101 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:47:32.764107 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:47:32.764114 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:47:32.764121 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:47:32.764127 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Oct 2 19:47:32.764135 kernel: kvm [1]: HYP mode not available Oct 2 19:47:32.764141 kernel: Initialise system trusted keyrings Oct 2 19:47:32.764148 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:47:32.764154 kernel: Key type asymmetric registered Oct 2 19:47:32.764160 kernel: Asymmetric key parser 'x509' registered Oct 2 19:47:32.764167 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:47:32.764173 kernel: io scheduler mq-deadline registered Oct 2 19:47:32.764180 kernel: io scheduler kyber registered Oct 2 19:47:32.764186 kernel: io scheduler bfq registered Oct 2 19:47:32.764204 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 2 19:47:32.764212 kernel: ACPI: button: Power Button [PWRB] Oct 2 19:47:32.764219 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 2 19:47:32.764277 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Oct 2 19:47:32.764285 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:47:32.764299 kernel: thunder_xcv, ver 1.0 Oct 2 19:47:32.764305 kernel: thunder_bgx, ver 1.0 Oct 2 19:47:32.764312 kernel: nicpf, ver 1.0 Oct 2 19:47:32.764318 kernel: nicvf, ver 1.0 Oct 2 19:47:32.764386 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 19:47:32.764453 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T19:47:32 UTC (1696276052) Oct 2 19:47:32.764471 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:47:32.764479 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:47:32.764486 kernel: Segment Routing with IPv6 Oct 2 19:47:32.764492 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:47:32.764498 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:47:32.764505 kernel: Key type dns_resolver registered Oct 2 19:47:32.764511 kernel: registered taskstats version 1 Oct 2 19:47:32.764520 kernel: Loading compiled-in X.509 certificates Oct 2 19:47:32.764527 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 19:47:32.764534 kernel: Key type .fscrypt registered Oct 2 19:47:32.764540 kernel: Key type fscrypt-provisioning registered Oct 2 19:47:32.764547 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:47:32.764553 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:47:32.764560 kernel: ima: No architecture policies found Oct 2 19:47:32.764566 kernel: Freeing unused kernel memory: 34560K Oct 2 19:47:32.764573 kernel: Run /init as init process Oct 2 19:47:32.764581 kernel: with arguments: Oct 2 19:47:32.764587 kernel: /init Oct 2 19:47:32.764594 kernel: with environment: Oct 2 19:47:32.764600 kernel: HOME=/ Oct 2 19:47:32.764607 kernel: TERM=linux Oct 2 19:47:32.764613 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:47:32.764621 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:47:32.764630 systemd[1]: Detected virtualization kvm. Oct 2 19:47:32.764639 systemd[1]: Detected architecture arm64. Oct 2 19:47:32.764645 systemd[1]: Running in initrd. Oct 2 19:47:32.764652 systemd[1]: No hostname configured, using default hostname. Oct 2 19:47:32.764659 systemd[1]: Hostname set to . Oct 2 19:47:32.764666 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:47:32.764672 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:47:32.764679 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:47:32.764686 systemd[1]: Reached target cryptsetup.target. Oct 2 19:47:32.764694 systemd[1]: Reached target paths.target. Oct 2 19:47:32.764701 systemd[1]: Reached target slices.target. Oct 2 19:47:32.764708 systemd[1]: Reached target swap.target. Oct 2 19:47:32.764714 systemd[1]: Reached target timers.target. Oct 2 19:47:32.764721 systemd[1]: Listening on iscsid.socket. Oct 2 19:47:32.764728 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:47:32.764735 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:47:32.764744 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:47:32.764751 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:47:32.764758 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:47:32.764765 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:47:32.764772 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:47:32.764779 systemd[1]: Reached target sockets.target. Oct 2 19:47:32.764786 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:47:32.764792 systemd[1]: Finished network-cleanup.service. Oct 2 19:47:32.764799 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:47:32.764807 systemd[1]: Starting systemd-journald.service... Oct 2 19:47:32.764815 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:47:32.764821 systemd[1]: Starting systemd-resolved.service... Oct 2 19:47:32.764828 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:47:32.764835 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:47:32.764842 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:47:32.764849 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:47:32.764859 systemd-journald[289]: Journal started Oct 2 19:47:32.764898 systemd-journald[289]: Runtime Journal (/run/log/journal/713e8482cdf646009703519f0ffdedeb) is 6.0M, max 48.7M, 42.6M free. Oct 2 19:47:32.754363 systemd-modules-load[290]: Inserted module 'overlay' Oct 2 19:47:32.767884 systemd[1]: Started systemd-journald.service. Oct 2 19:47:32.767000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:32.768247 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:47:32.772018 kernel: audit: type=1130 audit(1696276052.767:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:32.771548 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:47:32.780857 kernel: audit: type=1130 audit(1696276052.771:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:32.780874 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:47:32.780883 kernel: audit: type=1130 audit(1696276052.777:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:32.771000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:32.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:32.780415 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:47:32.784834 kernel: Bridge firewalling registered Oct 2 19:47:32.782850 systemd-modules-load[290]: Inserted module 'br_netfilter' Oct 2 19:47:32.793457 kernel: SCSI subsystem initialized Oct 2 19:47:32.793566 systemd-resolved[291]: Positive Trust Anchors: Oct 2 19:47:32.793576 systemd-resolved[291]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:47:32.793605 systemd-resolved[291]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:47:32.797884 systemd-resolved[291]: Defaulting to hostname 'linux'. Oct 2 19:47:32.808323 kernel: audit: type=1130 audit(1696276052.800:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:32.808342 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:47:32.808357 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:47:32.808366 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:47:32.800000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:32.798712 systemd[1]: Started systemd-resolved.service. Oct 2 19:47:32.801485 systemd[1]: Reached target nss-lookup.target. Oct 2 19:47:32.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:32.808507 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:47:32.814097 kernel: audit: type=1130 audit(1696276052.809:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:32.810681 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:47:32.814268 systemd-modules-load[290]: Inserted module 'dm_multipath' Oct 2 19:47:32.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:32.815109 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:47:32.819313 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:47:32.822175 kernel: audit: type=1130 audit(1696276052.815:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:32.822215 dracut-cmdline[307]: dracut-dracut-053 Oct 2 19:47:32.831115 dracut-cmdline[307]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:47:32.834857 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:47:32.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:32.839468 kernel: audit: type=1130 audit(1696276052.835:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:32.904473 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:47:32.916472 kernel: iscsi: registered transport (tcp) Oct 2 19:47:32.929838 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:47:32.929875 kernel: QLogic iSCSI HBA Driver Oct 2 19:47:32.976077 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:47:32.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:32.977851 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:47:32.981242 kernel: audit: type=1130 audit(1696276052.976:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:33.025495 kernel: raid6: neonx8 gen() 13677 MB/s Oct 2 19:47:33.042482 kernel: raid6: neonx8 xor() 10734 MB/s Oct 2 19:47:33.059473 kernel: raid6: neonx4 gen() 13311 MB/s Oct 2 19:47:33.076484 kernel: raid6: neonx4 xor() 11131 MB/s Oct 2 19:47:33.093472 kernel: raid6: neonx2 gen() 12845 MB/s Oct 2 19:47:33.110505 kernel: raid6: neonx2 xor() 10107 MB/s Oct 2 19:47:33.127485 kernel: raid6: neonx1 gen() 10387 MB/s Oct 2 19:47:33.144483 kernel: raid6: neonx1 xor() 8698 MB/s Oct 2 19:47:33.161488 kernel: raid6: int64x8 gen() 6216 MB/s Oct 2 19:47:33.178492 kernel: raid6: int64x8 xor() 3509 MB/s Oct 2 19:47:33.195470 kernel: raid6: int64x4 gen() 7212 MB/s Oct 2 19:47:33.212470 kernel: raid6: int64x4 xor() 3810 MB/s Oct 2 19:47:33.229486 kernel: raid6: int64x2 gen() 6086 MB/s Oct 2 19:47:33.246475 kernel: raid6: int64x2 xor() 3292 MB/s Oct 2 19:47:33.263470 kernel: raid6: int64x1 gen() 4979 MB/s Oct 2 19:47:33.280554 kernel: raid6: int64x1 xor() 2613 MB/s Oct 2 19:47:33.280582 kernel: raid6: using algorithm neonx8 gen() 13677 MB/s Oct 2 19:47:33.280600 kernel: raid6: .... xor() 10734 MB/s, rmw enabled Oct 2 19:47:33.281617 kernel: raid6: using neon recovery algorithm Oct 2 19:47:33.294455 kernel: xor: measuring software checksum speed Oct 2 19:47:33.295459 kernel: 8regs : 17282 MB/sec Oct 2 19:47:33.296828 kernel: 32regs : 20755 MB/sec Oct 2 19:47:33.296840 kernel: arm64_neon : 27826 MB/sec Oct 2 19:47:33.296854 kernel: xor: using function: arm64_neon (27826 MB/sec) Oct 2 19:47:33.351466 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 19:47:33.363434 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:47:33.363000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:33.366000 audit: BPF prog-id=7 op=LOAD Oct 2 19:47:33.366000 audit: BPF prog-id=8 op=LOAD Oct 2 19:47:33.367455 kernel: audit: type=1130 audit(1696276053.363:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:33.367686 systemd[1]: Starting systemd-udevd.service... Oct 2 19:47:33.380682 systemd-udevd[492]: Using default interface naming scheme 'v252'. Oct 2 19:47:33.383977 systemd[1]: Started systemd-udevd.service. Oct 2 19:47:33.384000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:33.386681 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:47:33.400304 dracut-pre-trigger[500]: rd.md=0: removing MD RAID activation Oct 2 19:47:33.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:33.432927 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:47:33.435392 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:47:33.471279 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:47:33.471000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:33.501541 kernel: virtio_blk virtio1: [vda] 9289728 512-byte logical blocks (4.76 GB/4.43 GiB) Oct 2 19:47:33.504466 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:47:33.532259 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:47:33.535301 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (555) Oct 2 19:47:33.536370 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:47:33.543199 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:47:33.546842 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:47:33.552763 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:47:33.554880 systemd[1]: Starting disk-uuid.service... Oct 2 19:47:33.563468 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:47:33.575472 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:47:33.578476 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:47:34.575312 disk-uuid[564]: The operation has completed successfully. Oct 2 19:47:34.576559 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:47:34.609968 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:47:34.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:34.610000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:34.610059 systemd[1]: Finished disk-uuid.service. Oct 2 19:47:34.611722 systemd[1]: Starting verity-setup.service... Oct 2 19:47:34.625470 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 19:47:34.648413 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:47:34.650695 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:47:34.653404 systemd[1]: Finished verity-setup.service. Oct 2 19:47:34.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:34.700461 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:47:34.700538 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:47:34.701329 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:47:34.702003 systemd[1]: Starting ignition-setup.service... Oct 2 19:47:34.704298 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:47:34.712023 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:47:34.712063 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:47:34.712073 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:47:34.722398 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:47:34.727468 systemd[1]: Finished ignition-setup.service. Oct 2 19:47:34.728982 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:47:34.727000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:34.808558 ignition[640]: Ignition 2.14.0 Oct 2 19:47:34.808567 ignition[640]: Stage: fetch-offline Oct 2 19:47:34.808604 ignition[640]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:47:34.808612 ignition[640]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:47:34.808743 ignition[640]: parsed url from cmdline: "" Oct 2 19:47:34.808746 ignition[640]: no config URL provided Oct 2 19:47:34.808750 ignition[640]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:47:34.808758 ignition[640]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:47:34.808775 ignition[640]: op(1): [started] loading QEMU firmware config module Oct 2 19:47:34.808780 ignition[640]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 2 19:47:34.813976 ignition[640]: op(1): [finished] loading QEMU firmware config module Oct 2 19:47:34.820891 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:47:34.823891 systemd[1]: Starting systemd-networkd.service... Oct 2 19:47:34.821000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:34.822000 audit: BPF prog-id=9 op=LOAD Oct 2 19:47:34.848548 systemd-networkd[740]: lo: Link UP Oct 2 19:47:34.848558 systemd-networkd[740]: lo: Gained carrier Oct 2 19:47:34.848925 systemd-networkd[740]: Enumeration completed Oct 2 19:47:34.849094 systemd-networkd[740]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:47:34.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:34.849269 systemd[1]: Started systemd-networkd.service. Oct 2 19:47:34.850240 systemd-networkd[740]: eth0: Link UP Oct 2 19:47:34.850244 systemd-networkd[740]: eth0: Gained carrier Oct 2 19:47:34.850317 systemd[1]: Reached target network.target. Oct 2 19:47:34.852237 systemd[1]: Starting iscsiuio.service... Oct 2 19:47:34.861801 systemd[1]: Started iscsiuio.service. Oct 2 19:47:34.862000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:34.863673 systemd[1]: Starting iscsid.service... Oct 2 19:47:34.866621 ignition[640]: parsing config with SHA512: 79f1cd49b664a77f9cea769455a262a8de49ccdf18dda7f3d9349fefb064721ff515c4aa810e048b46885e765fd197a85938ba43ce150620b9ef85c194ee4491 Oct 2 19:47:34.867363 iscsid[745]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:47:34.867363 iscsid[745]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:47:34.867363 iscsid[745]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:47:34.867363 iscsid[745]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:47:34.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:34.877823 iscsid[745]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:47:34.877823 iscsid[745]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:47:34.871618 systemd[1]: Started iscsid.service. Oct 2 19:47:34.875028 systemd-networkd[740]: eth0: DHCPv4 address 10.0.0.15/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:47:34.875753 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:47:34.900107 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:47:34.900000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:34.901038 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:47:34.902374 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:47:34.903816 systemd[1]: Reached target remote-fs.target. Oct 2 19:47:34.905915 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:47:34.907718 unknown[640]: fetched base config from "system" Oct 2 19:47:34.907728 unknown[640]: fetched user config from "qemu" Oct 2 19:47:34.908246 ignition[640]: fetch-offline: fetch-offline passed Oct 2 19:47:34.908310 ignition[640]: Ignition finished successfully Oct 2 19:47:34.911303 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:47:34.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:34.912312 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 2 19:47:34.913093 systemd[1]: Starting ignition-kargs.service... Oct 2 19:47:34.915389 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:47:34.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:34.924020 ignition[759]: Ignition 2.14.0 Oct 2 19:47:34.924031 ignition[759]: Stage: kargs Oct 2 19:47:34.924189 ignition[759]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:47:34.926302 systemd[1]: Finished ignition-kargs.service. Oct 2 19:47:34.927000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:34.924204 ignition[759]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:47:34.925159 ignition[759]: kargs: kargs passed Oct 2 19:47:34.928661 systemd[1]: Starting ignition-disks.service... Oct 2 19:47:34.925205 ignition[759]: Ignition finished successfully Oct 2 19:47:34.936950 ignition[766]: Ignition 2.14.0 Oct 2 19:47:34.936961 ignition[766]: Stage: disks Oct 2 19:47:34.937060 ignition[766]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:47:34.937070 ignition[766]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:47:34.939000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:34.939065 systemd[1]: Finished ignition-disks.service. Oct 2 19:47:34.938043 ignition[766]: disks: disks passed Oct 2 19:47:34.940121 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:47:34.938086 ignition[766]: Ignition finished successfully Oct 2 19:47:34.941701 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:47:34.943094 systemd[1]: Reached target local-fs.target. Oct 2 19:47:34.944276 systemd[1]: Reached target sysinit.target. Oct 2 19:47:34.945730 systemd[1]: Reached target basic.target. Oct 2 19:47:34.947899 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:47:34.959733 systemd-fsck[774]: ROOT: clean, 603/553520 files, 56011/553472 blocks Oct 2 19:47:34.963326 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:47:34.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:34.965072 systemd[1]: Mounting sysroot.mount... Oct 2 19:47:34.970461 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:47:34.970896 systemd[1]: Mounted sysroot.mount. Oct 2 19:47:34.971641 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:47:34.973760 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:47:34.974714 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:47:34.974750 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:47:34.974770 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:47:34.976778 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:47:34.978340 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:47:34.983514 initrd-setup-root[784]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:47:34.988614 initrd-setup-root[792]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:47:34.992183 initrd-setup-root[800]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:47:34.997180 initrd-setup-root[808]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:47:35.027104 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:47:35.027000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:35.028697 systemd[1]: Starting ignition-mount.service... Oct 2 19:47:35.029973 systemd[1]: Starting sysroot-boot.service... Oct 2 19:47:35.035169 bash[827]: umount: /sysroot/usr/share/oem: not mounted. Oct 2 19:47:35.044769 ignition[829]: INFO : Ignition 2.14.0 Oct 2 19:47:35.044769 ignition[829]: INFO : Stage: mount Oct 2 19:47:35.046550 ignition[829]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:47:35.046550 ignition[829]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:47:35.046550 ignition[829]: INFO : mount: mount passed Oct 2 19:47:35.046550 ignition[829]: INFO : Ignition finished successfully Oct 2 19:47:35.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:35.049000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:35.047028 systemd[1]: Finished ignition-mount.service. Oct 2 19:47:35.049296 systemd[1]: Finished sysroot-boot.service. Oct 2 19:47:35.659559 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:47:35.667257 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (838) Oct 2 19:47:35.667287 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:47:35.667297 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:47:35.668572 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:47:35.671374 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:47:35.672921 systemd[1]: Starting ignition-files.service... Oct 2 19:47:35.688986 ignition[858]: INFO : Ignition 2.14.0 Oct 2 19:47:35.688986 ignition[858]: INFO : Stage: files Oct 2 19:47:35.690608 ignition[858]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:47:35.690608 ignition[858]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:47:35.690608 ignition[858]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:47:35.693916 ignition[858]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:47:35.693916 ignition[858]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:47:35.696681 ignition[858]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:47:35.696681 ignition[858]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:47:35.696681 ignition[858]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:47:35.696681 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 19:47:35.696681 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-arm64-v1.1.1.tgz: attempt #1 Oct 2 19:47:35.695420 unknown[858]: wrote ssh authorized keys file for user: core Oct 2 19:47:35.952172 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:47:36.155245 ignition[858]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 6b5df61a53601926e4b5a9174828123d555f592165439f541bc117c68781f41c8bd30dccd52367e406d104df849bcbcfb72d9c4bafda4b045c59ce95d0ca0742 Oct 2 19:47:36.158149 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 19:47:36.158149 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 19:47:36.158149 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-arm64.tar.gz: attempt #1 Oct 2 19:47:36.299016 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:47:36.372558 systemd-networkd[740]: eth0: Gained IPv6LL Oct 2 19:47:36.478094 ignition[858]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: 4c7e4541123cbd6f1d6fec1f827395cd58d65716c0998de790f965485738b6d6257c0dc46fd7f66403166c299f6d5bf9ff30b6e1ff9afbb071f17005e834518c Oct 2 19:47:36.481120 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 19:47:36.481120 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:47:36.481120 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubeadm: attempt #1 Oct 2 19:47:36.530284 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:47:36.788603 ignition[858]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 46c9f489062bdb84574703f7339d140d7e42c9c71b367cd860071108a3c1d38fabda2ef69f9c0ff88f7c80e88d38f96ab2248d4c9a6c9c60b0a4c20fd640d0db Oct 2 19:47:36.788603 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:47:36.793093 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:47:36.793093 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubelet: attempt #1 Oct 2 19:47:36.852776 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:47:37.553810 ignition[858]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 0e4ee1f23bf768c49d09beb13a6b5fad6efc8e3e685e7c5610188763e3af55923fb46158b5e76973a0f9a055f9b30d525b467c53415f965536adc2f04d9cf18d Oct 2 19:47:37.556665 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:47:37.556665 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:47:37.556665 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubectl: attempt #1 Oct 2 19:47:37.595036 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:47:37.879816 ignition[858]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 3672fda0beebbbd636a2088f427463cbad32683ea4fbb1df61650552e63846b6a47db803ccb70c3db0a8f24746a23a5632bdc15a3fb78f4f7d833e7f86763c2a Oct 2 19:47:37.879816 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:47:37.884453 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:47:37.884453 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:47:37.884453 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:47:37.884453 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 19:47:38.031755 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 19:47:38.090150 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:47:38.092055 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:47:38.092055 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:47:38.092055 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:47:38.092055 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:47:38.092055 ignition[858]: INFO : files: op(c): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:47:38.092055 ignition[858]: INFO : files: op(c): op(d): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:47:38.092055 ignition[858]: INFO : files: op(c): op(d): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:47:38.092055 ignition[858]: INFO : files: op(c): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:47:38.092055 ignition[858]: INFO : files: op(e): [started] processing unit "prepare-critools.service" Oct 2 19:47:38.092055 ignition[858]: INFO : files: op(e): op(f): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:47:38.092055 ignition[858]: INFO : files: op(e): op(f): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:47:38.092055 ignition[858]: INFO : files: op(e): [finished] processing unit "prepare-critools.service" Oct 2 19:47:38.092055 ignition[858]: INFO : files: op(10): [started] processing unit "coreos-metadata.service" Oct 2 19:47:38.092055 ignition[858]: INFO : files: op(10): op(11): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:47:38.092055 ignition[858]: INFO : files: op(10): op(11): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:47:38.092055 ignition[858]: INFO : files: op(10): [finished] processing unit "coreos-metadata.service" Oct 2 19:47:38.092055 ignition[858]: INFO : files: op(12): [started] setting preset to disabled for "coreos-metadata.service" Oct 2 19:47:38.092055 ignition[858]: INFO : files: op(12): op(13): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:47:38.128059 ignition[858]: INFO : files: op(12): op(13): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:47:38.129744 ignition[858]: INFO : files: op(12): [finished] setting preset to disabled for "coreos-metadata.service" Oct 2 19:47:38.129744 ignition[858]: INFO : files: op(14): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:47:38.129744 ignition[858]: INFO : files: op(14): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:47:38.129744 ignition[858]: INFO : files: op(15): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:47:38.129744 ignition[858]: INFO : files: op(15): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:47:38.129744 ignition[858]: INFO : files: createResultFile: createFiles: op(16): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:47:38.129744 ignition[858]: INFO : files: createResultFile: createFiles: op(16): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:47:38.129744 ignition[858]: INFO : files: files passed Oct 2 19:47:38.129744 ignition[858]: INFO : Ignition finished successfully Oct 2 19:47:38.156237 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:47:38.156263 kernel: audit: type=1130 audit(1696276058.130:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.156274 kernel: audit: type=1130 audit(1696276058.141:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.156283 kernel: audit: type=1131 audit(1696276058.141:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.156298 kernel: audit: type=1130 audit(1696276058.147:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.141000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.129627 systemd[1]: Finished ignition-files.service. Oct 2 19:47:38.131582 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:47:38.135737 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:47:38.160249 initrd-setup-root-after-ignition[884]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 2 19:47:38.136366 systemd[1]: Starting ignition-quench.service... Oct 2 19:47:38.162570 initrd-setup-root-after-ignition[886]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:47:38.139658 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:47:38.139736 systemd[1]: Finished ignition-quench.service. Oct 2 19:47:38.143997 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:47:38.147922 systemd[1]: Reached target ignition-complete.target. Oct 2 19:47:38.153267 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:47:38.167000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.166849 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:47:38.175250 kernel: audit: type=1130 audit(1696276058.167:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.175270 kernel: audit: type=1131 audit(1696276058.167:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.166939 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:47:38.168580 systemd[1]: Reached target initrd-fs.target. Oct 2 19:47:38.174367 systemd[1]: Reached target initrd.target. Oct 2 19:47:38.176000 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:47:38.176714 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:47:38.188397 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:47:38.188000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.189980 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:47:38.193619 kernel: audit: type=1130 audit(1696276058.188:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.198912 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:47:38.199814 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:47:38.201263 systemd[1]: Stopped target timers.target. Oct 2 19:47:38.202618 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:47:38.203000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.202739 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:47:38.208319 kernel: audit: type=1131 audit(1696276058.203:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.204021 systemd[1]: Stopped target initrd.target. Oct 2 19:47:38.207787 systemd[1]: Stopped target basic.target. Oct 2 19:47:38.209065 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:47:38.210401 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:47:38.211741 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:47:38.213194 systemd[1]: Stopped target remote-fs.target. Oct 2 19:47:38.214578 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:47:38.216039 systemd[1]: Stopped target sysinit.target. Oct 2 19:47:38.217336 systemd[1]: Stopped target local-fs.target. Oct 2 19:47:38.218695 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:47:38.219984 systemd[1]: Stopped target swap.target. Oct 2 19:47:38.222000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.225475 kernel: audit: type=1131 audit(1696276058.222:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.221189 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:47:38.221304 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:47:38.227000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.222718 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:47:38.232104 kernel: audit: type=1131 audit(1696276058.227:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.231000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.226200 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:47:38.226308 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:47:38.227912 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:47:38.228014 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:47:38.231599 systemd[1]: Stopped target paths.target. Oct 2 19:47:38.232820 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:47:38.236474 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:47:38.237662 systemd[1]: Stopped target slices.target. Oct 2 19:47:38.239202 systemd[1]: Stopped target sockets.target. Oct 2 19:47:38.241000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.240631 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:47:38.242000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.240749 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:47:38.242083 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:47:38.246567 iscsid[745]: iscsid shutting down. Oct 2 19:47:38.242184 systemd[1]: Stopped ignition-files.service. Oct 2 19:47:38.244268 systemd[1]: Stopping ignition-mount.service... Oct 2 19:47:38.245914 systemd[1]: Stopping iscsid.service... Oct 2 19:47:38.249000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.247775 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:47:38.251000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.248989 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:47:38.249127 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:47:38.250494 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:47:38.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.255742 ignition[899]: INFO : Ignition 2.14.0 Oct 2 19:47:38.255742 ignition[899]: INFO : Stage: umount Oct 2 19:47:38.255742 ignition[899]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:47:38.255742 ignition[899]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:47:38.255742 ignition[899]: INFO : umount: umount passed Oct 2 19:47:38.255742 ignition[899]: INFO : Ignition finished successfully Oct 2 19:47:38.256000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.260000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.261000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.250588 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:47:38.263000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.253227 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:47:38.253337 systemd[1]: Stopped iscsid.service. Oct 2 19:47:38.255246 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:47:38.267000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.255392 systemd[1]: Stopped ignition-mount.service. Oct 2 19:47:38.269000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.269000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.257603 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:47:38.270000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.257675 systemd[1]: Closed iscsid.socket. Oct 2 19:47:38.259306 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:47:38.259347 systemd[1]: Stopped ignition-disks.service. Oct 2 19:47:38.274000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.261033 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:47:38.261071 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:47:38.262344 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:47:38.262382 systemd[1]: Stopped ignition-setup.service. Oct 2 19:47:38.264032 systemd[1]: Stopping iscsiuio.service... Oct 2 19:47:38.266652 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:47:38.267076 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:47:38.267161 systemd[1]: Stopped iscsiuio.service. Oct 2 19:47:38.268307 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:47:38.268386 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:47:38.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.269861 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:47:38.287000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.269939 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:47:38.271618 systemd[1]: Stopped target network.target. Oct 2 19:47:38.272361 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:47:38.272392 systemd[1]: Closed iscsiuio.socket. Oct 2 19:47:38.292000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.273522 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:47:38.292000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:47:38.293000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.273568 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:47:38.295000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.275420 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:47:38.276395 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:47:38.282498 systemd-networkd[740]: eth0: DHCPv6 lease lost Oct 2 19:47:38.299000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:47:38.283819 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:47:38.283904 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:47:38.286644 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:47:38.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.286726 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:47:38.288004 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:47:38.288031 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:47:38.306000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.290009 systemd[1]: Stopping network-cleanup.service... Oct 2 19:47:38.291114 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:47:38.291168 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:47:38.311000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.292659 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:47:38.312000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.292706 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:47:38.314000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.294786 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:47:38.294827 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:47:38.295761 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:47:38.318000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.299921 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:47:38.302663 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:47:38.320000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.302751 systemd[1]: Stopped network-cleanup.service. Oct 2 19:47:38.322000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.305538 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:47:38.305651 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:47:38.324000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.324000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:38.307307 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:47:38.307338 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:47:38.308379 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:47:38.308411 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:47:38.310036 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:47:38.310077 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:47:38.311668 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:47:38.311708 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:47:38.312975 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:47:38.313014 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:47:38.315264 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:47:38.316940 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 19:47:38.317003 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 19:47:38.319264 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:47:38.319306 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:47:38.321302 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:47:38.321349 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:47:38.323680 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 2 19:47:38.324086 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:47:38.324160 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:47:38.325289 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:47:38.327191 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:47:38.334506 systemd[1]: Switching root. Oct 2 19:47:38.354054 systemd-journald[289]: Journal stopped Oct 2 19:47:40.434142 systemd-journald[289]: Received SIGTERM from PID 1 (systemd). Oct 2 19:47:40.434245 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:47:40.434258 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:47:40.434268 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:47:40.434278 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:47:40.434297 kernel: SELinux: policy capability open_perms=1 Oct 2 19:47:40.434307 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:47:40.434316 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:47:40.434325 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:47:40.434335 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:47:40.434345 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:47:40.434355 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:47:40.434365 systemd[1]: Successfully loaded SELinux policy in 30.925ms. Oct 2 19:47:40.434396 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.679ms. Oct 2 19:47:40.434407 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:47:40.434418 systemd[1]: Detected virtualization kvm. Oct 2 19:47:40.434428 systemd[1]: Detected architecture arm64. Oct 2 19:47:40.434461 systemd[1]: Detected first boot. Oct 2 19:47:40.434473 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:47:40.434484 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:47:40.434495 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:47:40.434506 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:47:40.434518 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:47:40.434528 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:47:40.434540 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:47:40.434551 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:47:40.434560 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:47:40.434570 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:47:40.434580 systemd[1]: Created slice system-getty.slice. Oct 2 19:47:40.434591 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:47:40.434611 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:47:40.434622 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:47:40.434632 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:47:40.434644 systemd[1]: Created slice user.slice. Oct 2 19:47:40.434654 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:47:40.434980 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:47:40.434999 systemd[1]: Set up automount boot.automount. Oct 2 19:47:40.435010 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:47:40.435021 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:47:40.435030 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:47:40.435041 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:47:40.435054 systemd[1]: Reached target integritysetup.target. Oct 2 19:47:40.435064 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:47:40.435075 systemd[1]: Reached target remote-fs.target. Oct 2 19:47:40.435085 systemd[1]: Reached target slices.target. Oct 2 19:47:40.435095 systemd[1]: Reached target swap.target. Oct 2 19:47:40.435105 systemd[1]: Reached target torcx.target. Oct 2 19:47:40.435126 systemd[1]: Reached target veritysetup.target. Oct 2 19:47:40.435136 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:47:40.435147 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:47:40.435159 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:47:40.435169 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:47:40.435179 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:47:40.435189 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:47:40.435200 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:47:40.435209 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:47:40.435219 systemd[1]: Mounting media.mount... Oct 2 19:47:40.435229 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:47:40.435240 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:47:40.435251 systemd[1]: Mounting tmp.mount... Oct 2 19:47:40.435261 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:47:40.435272 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:47:40.435282 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:47:40.435293 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:47:40.435303 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:47:40.435314 systemd[1]: Starting modprobe@drm.service... Oct 2 19:47:40.435324 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:47:40.435334 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:47:40.435345 systemd[1]: Starting modprobe@loop.service... Oct 2 19:47:40.435357 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:47:40.435368 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:47:40.435378 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:47:40.435389 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:47:40.435399 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:47:40.435409 kernel: fuse: init (API version 7.34) Oct 2 19:47:40.435418 kernel: loop: module loaded Oct 2 19:47:40.435428 systemd[1]: Stopped systemd-journald.service. Oct 2 19:47:40.435454 systemd[1]: Starting systemd-journald.service... Oct 2 19:47:40.435466 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:47:40.435477 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:47:40.435487 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:47:40.435496 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:47:40.435507 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:47:40.435518 systemd[1]: Stopped verity-setup.service. Oct 2 19:47:40.435528 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:47:40.435538 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:47:40.435549 systemd[1]: Mounted media.mount. Oct 2 19:47:40.435560 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:47:40.435570 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:47:40.435580 systemd[1]: Mounted tmp.mount. Oct 2 19:47:40.435590 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:47:40.435600 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:47:40.435610 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:47:40.435620 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:47:40.435630 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:47:40.435640 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:47:40.435653 systemd-journald[1002]: Journal started Oct 2 19:47:40.435697 systemd-journald[1002]: Runtime Journal (/run/log/journal/713e8482cdf646009703519f0ffdedeb) is 6.0M, max 48.7M, 42.6M free. Oct 2 19:47:38.412000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:47:38.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:47:38.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:47:38.585000 audit: BPF prog-id=10 op=LOAD Oct 2 19:47:38.585000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:47:38.585000 audit: BPF prog-id=11 op=LOAD Oct 2 19:47:38.585000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:47:40.300000 audit: BPF prog-id=12 op=LOAD Oct 2 19:47:40.300000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:47:40.301000 audit: BPF prog-id=13 op=LOAD Oct 2 19:47:40.301000 audit: BPF prog-id=14 op=LOAD Oct 2 19:47:40.301000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:47:40.301000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:47:40.302000 audit: BPF prog-id=15 op=LOAD Oct 2 19:47:40.302000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:47:40.302000 audit: BPF prog-id=16 op=LOAD Oct 2 19:47:40.302000 audit: BPF prog-id=17 op=LOAD Oct 2 19:47:40.302000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:47:40.302000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:47:40.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.306000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.306000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.311000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:47:40.395000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.398000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.400000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.401000 audit: BPF prog-id=18 op=LOAD Oct 2 19:47:40.401000 audit: BPF prog-id=19 op=LOAD Oct 2 19:47:40.401000 audit: BPF prog-id=20 op=LOAD Oct 2 19:47:40.401000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:47:40.401000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:47:40.416000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.428000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.431000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.432000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:47:40.432000 audit[1002]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=ffffe75ddca0 a2=4000 a3=1 items=0 ppid=1 pid=1002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:40.432000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:47:40.434000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.434000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.299240 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:47:38.625478 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:47:38Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:47:40.299251 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 19:47:38.626729 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:47:38Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:47:40.303286 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:47:38.626749 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:47:38Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:47:38.626779 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:47:38Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:47:38.626788 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:47:38Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:47:38.626816 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:47:38Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:47:38.626829 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:47:38Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:47:38.627019 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:47:38Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:47:38.627052 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:47:38Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:47:38.627063 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:47:38Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:47:38.627514 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:47:38Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:47:38.627548 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:47:38Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:47:38.627567 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:47:38Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:47:38.627580 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:47:38Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:47:38.627596 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:47:38Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:47:38.627609 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:47:38Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:47:40.064257 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:47:40Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:47:40.438912 systemd[1]: Finished modprobe@drm.service. Oct 2 19:47:40.064533 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:47:40Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:47:40.438000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.438000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.064626 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:47:40Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:47:40.064786 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:47:40Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:47:40.064833 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:47:40Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:47:40.064891 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:47:40Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:47:40.440470 systemd[1]: Started systemd-journald.service. Oct 2 19:47:40.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.441121 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:47:40.441275 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:47:40.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.442000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.442472 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:47:40.443228 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:47:40.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.443000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.444341 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:47:40.444632 systemd[1]: Finished modprobe@loop.service. Oct 2 19:47:40.444000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.444000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.445727 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:47:40.446000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.446804 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:47:40.447000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.448057 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:47:40.448000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.449269 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:47:40.450000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.450557 systemd[1]: Reached target network-pre.target. Oct 2 19:47:40.452373 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:47:40.454408 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:47:40.455155 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:47:40.458218 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:47:40.460099 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:47:40.461031 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:47:40.461966 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:47:40.462783 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:47:40.463843 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:47:40.465641 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:47:40.468798 systemd-journald[1002]: Time spent on flushing to /var/log/journal/713e8482cdf646009703519f0ffdedeb is 14.413ms for 1000 entries. Oct 2 19:47:40.468798 systemd-journald[1002]: System Journal (/var/log/journal/713e8482cdf646009703519f0ffdedeb) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:47:40.492470 systemd-journald[1002]: Received client request to flush runtime journal. Oct 2 19:47:40.470000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.476000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.489000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.469138 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:47:40.471156 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:47:40.493836 udevadm[1032]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 19:47:40.472268 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:47:40.474665 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:47:40.475946 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:47:40.476883 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:47:40.485451 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:47:40.488330 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:47:40.490411 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:47:40.493500 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:47:40.493000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.506536 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:47:40.507000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.824858 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:47:40.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.826000 audit: BPF prog-id=21 op=LOAD Oct 2 19:47:40.826000 audit: BPF prog-id=22 op=LOAD Oct 2 19:47:40.826000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:47:40.826000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:47:40.827293 systemd[1]: Starting systemd-udevd.service... Oct 2 19:47:40.846700 systemd-udevd[1037]: Using default interface naming scheme 'v252'. Oct 2 19:47:40.860212 systemd[1]: Started systemd-udevd.service. Oct 2 19:47:40.859000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.861000 audit: BPF prog-id=23 op=LOAD Oct 2 19:47:40.862649 systemd[1]: Starting systemd-networkd.service... Oct 2 19:47:40.875000 audit: BPF prog-id=24 op=LOAD Oct 2 19:47:40.875000 audit: BPF prog-id=25 op=LOAD Oct 2 19:47:40.875000 audit: BPF prog-id=26 op=LOAD Oct 2 19:47:40.876932 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:47:40.903544 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Oct 2 19:47:40.906069 systemd[1]: Started systemd-userdbd.service. Oct 2 19:47:40.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.912213 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:47:40.967532 systemd-networkd[1039]: lo: Link UP Oct 2 19:47:40.967542 systemd-networkd[1039]: lo: Gained carrier Oct 2 19:47:40.967872 systemd-networkd[1039]: Enumeration completed Oct 2 19:47:40.967976 systemd[1]: Started systemd-networkd.service. Oct 2 19:47:40.967977 systemd-networkd[1039]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:47:40.968000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.969894 systemd-networkd[1039]: eth0: Link UP Oct 2 19:47:40.969903 systemd-networkd[1039]: eth0: Gained carrier Oct 2 19:47:40.976795 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:47:40.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:40.978788 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:47:40.993388 lvm[1071]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:47:40.994553 systemd-networkd[1039]: eth0: DHCPv4 address 10.0.0.15/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:47:41.019335 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:47:41.019000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:41.020362 systemd[1]: Reached target cryptsetup.target. Oct 2 19:47:41.022270 systemd[1]: Starting lvm2-activation.service... Oct 2 19:47:41.026482 lvm[1072]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:47:41.055300 systemd[1]: Finished lvm2-activation.service. Oct 2 19:47:41.055000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:41.056271 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:47:41.057156 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:47:41.057188 systemd[1]: Reached target local-fs.target. Oct 2 19:47:41.057974 systemd[1]: Reached target machines.target. Oct 2 19:47:41.059892 systemd[1]: Starting ldconfig.service... Oct 2 19:47:41.060905 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:47:41.060956 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:47:41.061943 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:47:41.063814 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:47:41.065934 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:47:41.066927 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:47:41.067008 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:47:41.067974 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:47:41.069230 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1074 (bootctl) Oct 2 19:47:41.071424 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:47:41.087280 systemd-tmpfiles[1077]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:47:41.091000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:41.088633 systemd-tmpfiles[1077]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:47:41.089782 systemd-tmpfiles[1077]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:47:41.090313 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:47:41.107279 systemd-fsck[1082]: fsck.fat 4.2 (2021-01-31) Oct 2 19:47:41.107279 systemd-fsck[1082]: /dev/vda1: 236 files, 113463/258078 clusters Oct 2 19:47:41.108653 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:47:41.110000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:41.111744 systemd[1]: Mounting boot.mount... Oct 2 19:47:41.185208 systemd[1]: Mounted boot.mount. Oct 2 19:47:41.210894 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:47:41.211000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:41.213761 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:47:41.214000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:41.275741 ldconfig[1073]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:47:41.277188 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:47:41.277000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:41.279494 systemd[1]: Starting audit-rules.service... Oct 2 19:47:41.281216 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:47:41.283132 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:47:41.284000 audit: BPF prog-id=27 op=LOAD Oct 2 19:47:41.285623 systemd[1]: Starting systemd-resolved.service... Oct 2 19:47:41.288000 audit: BPF prog-id=28 op=LOAD Oct 2 19:47:41.291537 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:47:41.293285 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:47:41.294983 systemd[1]: Finished ldconfig.service. Oct 2 19:47:41.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:41.296486 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:47:41.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:41.297600 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:47:41.301000 audit[1091]: SYSTEM_BOOT pid=1091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:47:41.303308 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:47:41.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:41.305529 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:47:41.306000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:41.307512 systemd[1]: Starting systemd-update-done.service... Oct 2 19:47:41.323175 systemd[1]: Finished systemd-update-done.service. Oct 2 19:47:41.323566 augenrules[1106]: No rules Oct 2 19:47:41.322000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:47:41.322000 audit[1106]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc0f1f180 a2=420 a3=0 items=0 ppid=1085 pid=1106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:41.322000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:47:41.324712 systemd[1]: Finished audit-rules.service. Oct 2 19:47:41.338786 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:47:41.339472 systemd-timesyncd[1090]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 2 19:47:41.339522 systemd-timesyncd[1090]: Initial clock synchronization to Mon 2023-10-02 19:47:41.019692 UTC. Oct 2 19:47:41.339911 systemd[1]: Reached target time-set.target. Oct 2 19:47:41.355490 systemd-resolved[1089]: Positive Trust Anchors: Oct 2 19:47:41.355500 systemd-resolved[1089]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:47:41.355527 systemd-resolved[1089]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:47:41.369032 systemd-resolved[1089]: Defaulting to hostname 'linux'. Oct 2 19:47:41.370466 systemd[1]: Started systemd-resolved.service. Oct 2 19:47:41.371373 systemd[1]: Reached target network.target. Oct 2 19:47:41.372183 systemd[1]: Reached target nss-lookup.target. Oct 2 19:47:41.372996 systemd[1]: Reached target sysinit.target. Oct 2 19:47:41.373846 systemd[1]: Started motdgen.path. Oct 2 19:47:41.374568 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:47:41.375760 systemd[1]: Started logrotate.timer. Oct 2 19:47:41.376613 systemd[1]: Started mdadm.timer. Oct 2 19:47:41.377302 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:47:41.378160 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:47:41.378191 systemd[1]: Reached target paths.target. Oct 2 19:47:41.378926 systemd[1]: Reached target timers.target. Oct 2 19:47:41.379977 systemd[1]: Listening on dbus.socket. Oct 2 19:47:41.381671 systemd[1]: Starting docker.socket... Oct 2 19:47:41.385130 systemd[1]: Listening on sshd.socket. Oct 2 19:47:41.385969 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:47:41.386382 systemd[1]: Listening on docker.socket. Oct 2 19:47:41.387241 systemd[1]: Reached target sockets.target. Oct 2 19:47:41.388029 systemd[1]: Reached target basic.target. Oct 2 19:47:41.388809 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:47:41.388841 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:47:41.389813 systemd[1]: Starting containerd.service... Oct 2 19:47:41.391472 systemd[1]: Starting dbus.service... Oct 2 19:47:41.393024 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:47:41.394887 systemd[1]: Starting extend-filesystems.service... Oct 2 19:47:41.395759 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:47:41.396772 systemd[1]: Starting motdgen.service... Oct 2 19:47:41.398508 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:47:41.400841 jq[1116]: false Oct 2 19:47:41.400562 systemd[1]: Starting prepare-critools.service... Oct 2 19:47:41.402594 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:47:41.404512 systemd[1]: Starting sshd-keygen.service... Oct 2 19:47:41.408413 systemd[1]: Starting systemd-logind.service... Oct 2 19:47:41.409182 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:47:41.409236 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:47:41.410569 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:47:41.411151 systemd[1]: Starting update-engine.service... Oct 2 19:47:41.412807 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:47:41.415121 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:47:41.415268 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:47:41.415604 jq[1135]: true Oct 2 19:47:41.417002 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:47:41.417153 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:47:41.419738 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:47:41.423514 dbus-daemon[1115]: [system] SELinux support is enabled Oct 2 19:47:41.425072 systemd[1]: Started dbus.service. Oct 2 19:47:41.427641 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:47:41.427681 systemd[1]: Reached target system-config.target. Oct 2 19:47:41.428647 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:47:41.428661 systemd[1]: Reached target user-config.target. Oct 2 19:47:41.431339 jq[1140]: true Oct 2 19:47:41.434614 extend-filesystems[1117]: Found vda Oct 2 19:47:41.434614 extend-filesystems[1117]: Found vda1 Oct 2 19:47:41.434614 extend-filesystems[1117]: Found vda2 Oct 2 19:47:41.434614 extend-filesystems[1117]: Found vda3 Oct 2 19:47:41.434614 extend-filesystems[1117]: Found usr Oct 2 19:47:41.434614 extend-filesystems[1117]: Found vda4 Oct 2 19:47:41.434614 extend-filesystems[1117]: Found vda6 Oct 2 19:47:41.434614 extend-filesystems[1117]: Found vda7 Oct 2 19:47:41.434614 extend-filesystems[1117]: Found vda9 Oct 2 19:47:41.434614 extend-filesystems[1117]: Checking size of /dev/vda9 Oct 2 19:47:41.447619 tar[1138]: ./ Oct 2 19:47:41.447619 tar[1138]: ./macvlan Oct 2 19:47:41.440870 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:47:41.448004 tar[1139]: crictl Oct 2 19:47:41.441009 systemd[1]: Finished motdgen.service. Oct 2 19:47:41.475779 extend-filesystems[1117]: Old size kept for /dev/vda9 Oct 2 19:47:41.476047 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:47:41.476188 systemd[1]: Finished extend-filesystems.service. Oct 2 19:47:41.500645 bash[1167]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:47:41.501273 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:47:41.502969 systemd-logind[1128]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 19:47:41.506409 systemd-logind[1128]: New seat seat0. Oct 2 19:47:41.509069 systemd[1]: Started systemd-logind.service. Oct 2 19:47:41.511823 tar[1138]: ./static Oct 2 19:47:41.536712 tar[1138]: ./vlan Oct 2 19:47:41.548421 update_engine[1134]: I1002 19:47:41.547434 1134 main.cc:92] Flatcar Update Engine starting Oct 2 19:47:41.553180 systemd[1]: Started update-engine.service. Oct 2 19:47:41.556992 env[1142]: time="2023-10-02T19:47:41.554667680Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:47:41.555775 systemd[1]: Started locksmithd.service. Oct 2 19:47:41.557644 update_engine[1134]: I1002 19:47:41.557539 1134 update_check_scheduler.cc:74] Next update check in 8m46s Oct 2 19:47:41.581938 tar[1138]: ./portmap Oct 2 19:47:41.610687 env[1142]: time="2023-10-02T19:47:41.610585160Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:47:41.610788 env[1142]: time="2023-10-02T19:47:41.610745640Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:47:41.612663 env[1142]: time="2023-10-02T19:47:41.612624120Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:47:41.612663 env[1142]: time="2023-10-02T19:47:41.612657120Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:47:41.612865 env[1142]: time="2023-10-02T19:47:41.612840240Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:47:41.612865 env[1142]: time="2023-10-02T19:47:41.612862280Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:47:41.612934 env[1142]: time="2023-10-02T19:47:41.612876080Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:47:41.612934 env[1142]: time="2023-10-02T19:47:41.612885640Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:47:41.612972 env[1142]: time="2023-10-02T19:47:41.612958360Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:47:41.613271 env[1142]: time="2023-10-02T19:47:41.613241400Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:47:41.613402 env[1142]: time="2023-10-02T19:47:41.613376440Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:47:41.613402 env[1142]: time="2023-10-02T19:47:41.613396160Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:47:41.613497 env[1142]: time="2023-10-02T19:47:41.613481920Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:47:41.613522 env[1142]: time="2023-10-02T19:47:41.613498080Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:47:41.618895 env[1142]: time="2023-10-02T19:47:41.618009960Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:47:41.618895 env[1142]: time="2023-10-02T19:47:41.618042840Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:47:41.618895 env[1142]: time="2023-10-02T19:47:41.618055040Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:47:41.618895 env[1142]: time="2023-10-02T19:47:41.618091800Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:47:41.618895 env[1142]: time="2023-10-02T19:47:41.618108240Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:47:41.618895 env[1142]: time="2023-10-02T19:47:41.618122400Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:47:41.618895 env[1142]: time="2023-10-02T19:47:41.618135200Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:47:41.618895 env[1142]: time="2023-10-02T19:47:41.618490600Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:47:41.618895 env[1142]: time="2023-10-02T19:47:41.618511840Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:47:41.618895 env[1142]: time="2023-10-02T19:47:41.618525760Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:47:41.618895 env[1142]: time="2023-10-02T19:47:41.618538320Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:47:41.618895 env[1142]: time="2023-10-02T19:47:41.618550760Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:47:41.618895 env[1142]: time="2023-10-02T19:47:41.618678760Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:47:41.619266 env[1142]: time="2023-10-02T19:47:41.618867120Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:47:41.619579 env[1142]: time="2023-10-02T19:47:41.619558120Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:47:41.619667 env[1142]: time="2023-10-02T19:47:41.619652920Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:47:41.619734 env[1142]: time="2023-10-02T19:47:41.619720560Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:47:41.619915 env[1142]: time="2023-10-02T19:47:41.619899480Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:47:41.620068 env[1142]: time="2023-10-02T19:47:41.620052520Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:47:41.620138 env[1142]: time="2023-10-02T19:47:41.620125360Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:47:41.620198 env[1142]: time="2023-10-02T19:47:41.620185280Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:47:41.620250 env[1142]: time="2023-10-02T19:47:41.620238320Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:47:41.620304 env[1142]: time="2023-10-02T19:47:41.620292120Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:47:41.620359 env[1142]: time="2023-10-02T19:47:41.620346000Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:47:41.620414 env[1142]: time="2023-10-02T19:47:41.620399440Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:47:41.620721 env[1142]: time="2023-10-02T19:47:41.620697480Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:47:41.620928 env[1142]: time="2023-10-02T19:47:41.620909280Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:47:41.620997 env[1142]: time="2023-10-02T19:47:41.620984760Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:47:41.621056 env[1142]: time="2023-10-02T19:47:41.621042560Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:47:41.621111 env[1142]: time="2023-10-02T19:47:41.621098160Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:47:41.621183 env[1142]: time="2023-10-02T19:47:41.621167120Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:47:41.621237 env[1142]: time="2023-10-02T19:47:41.621224800Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:47:41.621304 env[1142]: time="2023-10-02T19:47:41.621288960Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:47:41.621392 env[1142]: time="2023-10-02T19:47:41.621376480Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:47:41.621729 env[1142]: time="2023-10-02T19:47:41.621668160Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:47:41.624231 env[1142]: time="2023-10-02T19:47:41.622079160Z" level=info msg="Connect containerd service" Oct 2 19:47:41.624231 env[1142]: time="2023-10-02T19:47:41.622119960Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:47:41.624934 env[1142]: time="2023-10-02T19:47:41.624906880Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:47:41.625277 env[1142]: time="2023-10-02T19:47:41.625247720Z" level=info msg="Start subscribing containerd event" Oct 2 19:47:41.625381 env[1142]: time="2023-10-02T19:47:41.625366120Z" level=info msg="Start recovering state" Oct 2 19:47:41.625508 env[1142]: time="2023-10-02T19:47:41.625494040Z" level=info msg="Start event monitor" Oct 2 19:47:41.625606 env[1142]: time="2023-10-02T19:47:41.625591240Z" level=info msg="Start snapshots syncer" Oct 2 19:47:41.625663 env[1142]: time="2023-10-02T19:47:41.625650520Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:47:41.625713 env[1142]: time="2023-10-02T19:47:41.625701640Z" level=info msg="Start streaming server" Oct 2 19:47:41.626153 env[1142]: time="2023-10-02T19:47:41.626134680Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:47:41.626283 env[1142]: time="2023-10-02T19:47:41.626268560Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:47:41.626468 systemd[1]: Started containerd.service. Oct 2 19:47:41.628519 env[1142]: time="2023-10-02T19:47:41.628493200Z" level=info msg="containerd successfully booted in 0.074511s" Oct 2 19:47:41.628709 tar[1138]: ./host-local Oct 2 19:47:41.652239 tar[1138]: ./vrf Oct 2 19:47:41.676781 tar[1138]: ./bridge Oct 2 19:47:41.713676 tar[1138]: ./tuning Oct 2 19:47:41.737141 tar[1138]: ./firewall Oct 2 19:47:41.742860 locksmithd[1170]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:47:41.767453 tar[1138]: ./host-device Oct 2 19:47:41.793499 tar[1138]: ./sbr Oct 2 19:47:41.817173 tar[1138]: ./loopback Oct 2 19:47:41.840087 tar[1138]: ./dhcp Oct 2 19:47:41.896832 systemd[1]: Finished prepare-critools.service. Oct 2 19:47:41.906722 tar[1138]: ./ptp Oct 2 19:47:41.934695 tar[1138]: ./ipvlan Oct 2 19:47:41.962054 tar[1138]: ./bandwidth Oct 2 19:47:42.000565 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:47:42.196598 systemd-networkd[1039]: eth0: Gained IPv6LL Oct 2 19:47:43.646519 sshd_keygen[1136]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:47:43.665349 systemd[1]: Finished sshd-keygen.service. Oct 2 19:47:43.667574 systemd[1]: Starting issuegen.service... Oct 2 19:47:43.672662 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:47:43.672807 systemd[1]: Finished issuegen.service. Oct 2 19:47:43.674982 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:47:43.681164 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:47:43.683260 systemd[1]: Started getty@tty1.service. Oct 2 19:47:43.685200 systemd[1]: Started serial-getty@ttyAMA0.service. Oct 2 19:47:43.686190 systemd[1]: Reached target getty.target. Oct 2 19:47:43.687000 systemd[1]: Reached target multi-user.target. Oct 2 19:47:43.688884 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:47:43.696069 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:47:43.696214 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:47:43.697232 systemd[1]: Startup finished in 664ms (kernel) + 5.789s (initrd) + 5.319s (userspace) = 11.772s. Oct 2 19:47:45.613300 systemd[1]: Created slice system-sshd.slice. Oct 2 19:47:45.614369 systemd[1]: Started sshd@0-10.0.0.15:22-10.0.0.1:59780.service. Oct 2 19:47:45.655690 sshd[1198]: Accepted publickey for core from 10.0.0.1 port 59780 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:47:45.657674 sshd[1198]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:47:45.665258 systemd[1]: Created slice user-500.slice. Oct 2 19:47:45.666337 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:47:45.668030 systemd-logind[1128]: New session 1 of user core. Oct 2 19:47:45.674471 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:47:45.675687 systemd[1]: Starting user@500.service... Oct 2 19:47:45.678651 (systemd)[1201]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:47:45.736314 systemd[1201]: Queued start job for default target default.target. Oct 2 19:47:45.736812 systemd[1201]: Reached target paths.target. Oct 2 19:47:45.736830 systemd[1201]: Reached target sockets.target. Oct 2 19:47:45.736840 systemd[1201]: Reached target timers.target. Oct 2 19:47:45.736850 systemd[1201]: Reached target basic.target. Oct 2 19:47:45.736901 systemd[1201]: Reached target default.target. Oct 2 19:47:45.736924 systemd[1201]: Startup finished in 52ms. Oct 2 19:47:45.737455 systemd[1]: Started user@500.service. Oct 2 19:47:45.738341 systemd[1]: Started session-1.scope. Oct 2 19:47:45.788163 systemd[1]: Started sshd@1-10.0.0.15:22-10.0.0.1:59792.service. Oct 2 19:47:45.825789 sshd[1210]: Accepted publickey for core from 10.0.0.1 port 59792 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:47:45.827068 sshd[1210]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:47:45.830645 systemd-logind[1128]: New session 2 of user core. Oct 2 19:47:45.831387 systemd[1]: Started session-2.scope. Oct 2 19:47:45.886450 sshd[1210]: pam_unix(sshd:session): session closed for user core Oct 2 19:47:45.888879 systemd[1]: sshd@1-10.0.0.15:22-10.0.0.1:59792.service: Deactivated successfully. Oct 2 19:47:45.889391 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:47:45.889935 systemd-logind[1128]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:47:45.891131 systemd[1]: Started sshd@2-10.0.0.15:22-10.0.0.1:59798.service. Oct 2 19:47:45.891794 systemd-logind[1128]: Removed session 2. Oct 2 19:47:45.925782 sshd[1216]: Accepted publickey for core from 10.0.0.1 port 59798 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:47:45.926922 sshd[1216]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:47:45.930172 systemd-logind[1128]: New session 3 of user core. Oct 2 19:47:45.930911 systemd[1]: Started session-3.scope. Oct 2 19:47:45.980070 sshd[1216]: pam_unix(sshd:session): session closed for user core Oct 2 19:47:45.983507 systemd[1]: sshd@2-10.0.0.15:22-10.0.0.1:59798.service: Deactivated successfully. Oct 2 19:47:45.984004 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:47:45.984488 systemd-logind[1128]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:47:45.985372 systemd[1]: Started sshd@3-10.0.0.15:22-10.0.0.1:59808.service. Oct 2 19:47:45.986027 systemd-logind[1128]: Removed session 3. Oct 2 19:47:46.019737 sshd[1222]: Accepted publickey for core from 10.0.0.1 port 59808 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:47:46.021239 sshd[1222]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:47:46.024330 systemd-logind[1128]: New session 4 of user core. Oct 2 19:47:46.025090 systemd[1]: Started session-4.scope. Oct 2 19:47:46.078155 sshd[1222]: pam_unix(sshd:session): session closed for user core Oct 2 19:47:46.082064 systemd[1]: sshd@3-10.0.0.15:22-10.0.0.1:59808.service: Deactivated successfully. Oct 2 19:47:46.082609 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:47:46.083086 systemd-logind[1128]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:47:46.084001 systemd[1]: Started sshd@4-10.0.0.15:22-10.0.0.1:59810.service. Oct 2 19:47:46.084641 systemd-logind[1128]: Removed session 4. Oct 2 19:47:46.118227 sshd[1228]: Accepted publickey for core from 10.0.0.1 port 59810 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:47:46.119528 sshd[1228]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:47:46.122333 systemd-logind[1128]: New session 5 of user core. Oct 2 19:47:46.123027 systemd[1]: Started session-5.scope. Oct 2 19:47:46.188369 sudo[1231]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:47:46.188603 sudo[1231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:47:46.204647 dbus-daemon[1115]: avc: received setenforce notice (enforcing=1) Oct 2 19:47:46.205489 sudo[1231]: pam_unix(sudo:session): session closed for user root Oct 2 19:47:46.207354 sshd[1228]: pam_unix(sshd:session): session closed for user core Oct 2 19:47:46.210186 systemd[1]: sshd@4-10.0.0.15:22-10.0.0.1:59810.service: Deactivated successfully. Oct 2 19:47:46.210762 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:47:46.211243 systemd-logind[1128]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:47:46.212231 systemd[1]: Started sshd@5-10.0.0.15:22-10.0.0.1:59824.service. Oct 2 19:47:46.212739 systemd-logind[1128]: Removed session 5. Oct 2 19:47:46.247186 sshd[1235]: Accepted publickey for core from 10.0.0.1 port 59824 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:47:46.248631 sshd[1235]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:47:46.251403 systemd-logind[1128]: New session 6 of user core. Oct 2 19:47:46.252105 systemd[1]: Started session-6.scope. Oct 2 19:47:46.302985 sudo[1239]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:47:46.303169 sudo[1239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:47:46.305712 sudo[1239]: pam_unix(sudo:session): session closed for user root Oct 2 19:47:46.309934 sudo[1238]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:47:46.310130 sudo[1238]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:47:46.318174 systemd[1]: Stopping audit-rules.service... Oct 2 19:47:46.319000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:47:46.319597 auditctl[1242]: No rules Oct 2 19:47:46.319818 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:47:46.319966 systemd[1]: Stopped audit-rules.service. Oct 2 19:47:46.321252 systemd[1]: Starting audit-rules.service... Oct 2 19:47:46.321793 kernel: kauditd_printk_skb: 122 callbacks suppressed Oct 2 19:47:46.321852 kernel: audit: type=1305 audit(1696276066.319:162): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:47:46.321873 kernel: audit: type=1300 audit(1696276066.319:162): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff7e35d90 a2=420 a3=0 items=0 ppid=1 pid=1242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:46.319000 audit[1242]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff7e35d90 a2=420 a3=0 items=0 ppid=1 pid=1242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:46.319000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:47:46.327066 kernel: audit: type=1327 audit(1696276066.319:162): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:47:46.327126 kernel: audit: type=1131 audit(1696276066.319:163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:46.319000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:46.338095 augenrules[1259]: No rules Oct 2 19:47:46.338869 systemd[1]: Finished audit-rules.service. Oct 2 19:47:46.337000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:46.339958 sudo[1238]: pam_unix(sudo:session): session closed for user root Oct 2 19:47:46.342669 sshd[1235]: pam_unix(sshd:session): session closed for user core Oct 2 19:47:46.338000 audit[1238]: USER_END pid=1238 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:47:46.345486 systemd[1]: Started sshd@6-10.0.0.15:22-10.0.0.1:59840.service. Oct 2 19:47:46.346172 kernel: audit: type=1130 audit(1696276066.337:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:46.346216 kernel: audit: type=1106 audit(1696276066.338:165): pid=1238 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:47:46.346232 kernel: audit: type=1104 audit(1696276066.338:166): pid=1238 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:47:46.338000 audit[1238]: CRED_DISP pid=1238 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:47:46.346357 systemd[1]: sshd@5-10.0.0.15:22-10.0.0.1:59824.service: Deactivated successfully. Oct 2 19:47:46.346978 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:47:46.347448 systemd-logind[1128]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:47:46.348196 systemd-logind[1128]: Removed session 6. Oct 2 19:47:46.343000 audit[1235]: USER_END pid=1235 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:47:46.352154 kernel: audit: type=1106 audit(1696276066.343:167): pid=1235 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:47:46.352189 kernel: audit: type=1104 audit(1696276066.343:168): pid=1235 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:47:46.343000 audit[1235]: CRED_DISP pid=1235 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:47:46.344000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.15:22-10.0.0.1:59840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:46.357546 kernel: audit: type=1130 audit(1696276066.344:169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.15:22-10.0.0.1:59840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:46.345000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.15:22-10.0.0.1:59824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:46.380000 audit[1264]: USER_ACCT pid=1264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:47:46.382082 sshd[1264]: Accepted publickey for core from 10.0.0.1 port 59840 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:47:46.381000 audit[1264]: CRED_ACQ pid=1264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:47:46.381000 audit[1264]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9844f70 a2=3 a3=1 items=0 ppid=1 pid=1264 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:46.381000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:47:46.383118 sshd[1264]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:47:46.386001 systemd-logind[1128]: New session 7 of user core. Oct 2 19:47:46.386727 systemd[1]: Started session-7.scope. Oct 2 19:47:46.388000 audit[1264]: USER_START pid=1264 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:47:46.389000 audit[1268]: CRED_ACQ pid=1268 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:47:46.437704 sudo[1269]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:47:46.438191 sudo[1269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:47:46.436000 audit[1269]: USER_ACCT pid=1269 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:47:46.436000 audit[1269]: CRED_REFR pid=1269 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:47:46.438000 audit[1269]: USER_START pid=1269 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:47:47.014941 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:47:47.023202 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:47:47.023514 systemd[1]: Reached target network-online.target. Oct 2 19:47:47.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:47.024628 systemd[1]: Starting docker.service... Oct 2 19:47:47.107333 env[1287]: time="2023-10-02T19:47:47.107279250Z" level=info msg="Starting up" Oct 2 19:47:47.108873 env[1287]: time="2023-10-02T19:47:47.108851079Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:47:47.108873 env[1287]: time="2023-10-02T19:47:47.108869807Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:47:47.108943 env[1287]: time="2023-10-02T19:47:47.108886772Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:47:47.108943 env[1287]: time="2023-10-02T19:47:47.108896802Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:47:47.111080 env[1287]: time="2023-10-02T19:47:47.111054883Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:47:47.111183 env[1287]: time="2023-10-02T19:47:47.111168584Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:47:47.111246 env[1287]: time="2023-10-02T19:47:47.111230527Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:47:47.111295 env[1287]: time="2023-10-02T19:47:47.111284126Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:47:47.289713 env[1287]: time="2023-10-02T19:47:47.289623118Z" level=info msg="Loading containers: start." Oct 2 19:47:47.331000 audit[1321]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1321 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.331000 audit[1321]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffeeef8230 a2=0 a3=1 items=0 ppid=1287 pid=1321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.331000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:47:47.333000 audit[1323]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1323 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.333000 audit[1323]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffdf7da1b0 a2=0 a3=1 items=0 ppid=1287 pid=1323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.333000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:47:47.335000 audit[1325]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1325 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.335000 audit[1325]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffaffd030 a2=0 a3=1 items=0 ppid=1287 pid=1325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.335000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:47:47.337000 audit[1327]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.337000 audit[1327]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd06aa620 a2=0 a3=1 items=0 ppid=1287 pid=1327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.337000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:47:47.340000 audit[1329]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1329 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.340000 audit[1329]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff9c46990 a2=0 a3=1 items=0 ppid=1287 pid=1329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.340000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:47:47.367000 audit[1334]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1334 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.367000 audit[1334]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffce532f30 a2=0 a3=1 items=0 ppid=1287 pid=1334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.367000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:47:47.374000 audit[1336]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1336 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.374000 audit[1336]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc40e3310 a2=0 a3=1 items=0 ppid=1287 pid=1336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.374000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:47:47.375000 audit[1338]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1338 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.375000 audit[1338]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffc433e930 a2=0 a3=1 items=0 ppid=1287 pid=1338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.375000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:47:47.377000 audit[1340]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1340 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.377000 audit[1340]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=fffff516c860 a2=0 a3=1 items=0 ppid=1287 pid=1340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.377000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:47:47.384000 audit[1344]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1344 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.384000 audit[1344]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffd3ec7510 a2=0 a3=1 items=0 ppid=1287 pid=1344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.384000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:47:47.385000 audit[1345]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1345 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.385000 audit[1345]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffffcbdc130 a2=0 a3=1 items=0 ppid=1287 pid=1345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.385000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:47:47.391454 kernel: Initializing XFRM netlink socket Oct 2 19:47:47.413694 env[1287]: time="2023-10-02T19:47:47.413655077Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:47:47.430000 audit[1353]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1353 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.430000 audit[1353]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=fffffbeaf990 a2=0 a3=1 items=0 ppid=1287 pid=1353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.430000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:47:47.444000 audit[1356]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1356 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.444000 audit[1356]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=fffffd670160 a2=0 a3=1 items=0 ppid=1287 pid=1356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.444000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:47:47.448000 audit[1359]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1359 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.448000 audit[1359]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd3d451f0 a2=0 a3=1 items=0 ppid=1287 pid=1359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.448000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:47:47.450000 audit[1361]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1361 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.450000 audit[1361]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffe527e1f0 a2=0 a3=1 items=0 ppid=1287 pid=1361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.450000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:47:47.452000 audit[1363]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1363 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.452000 audit[1363]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffd8872f10 a2=0 a3=1 items=0 ppid=1287 pid=1363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.452000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:47:47.455000 audit[1365]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1365 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.455000 audit[1365]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=fffff77ac460 a2=0 a3=1 items=0 ppid=1287 pid=1365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.455000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:47:47.457000 audit[1367]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1367 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.457000 audit[1367]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffeed06970 a2=0 a3=1 items=0 ppid=1287 pid=1367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.457000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:47:47.464000 audit[1370]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1370 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.464000 audit[1370]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffc6293d70 a2=0 a3=1 items=0 ppid=1287 pid=1370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.464000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:47:47.466000 audit[1372]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1372 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.466000 audit[1372]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffe8123440 a2=0 a3=1 items=0 ppid=1287 pid=1372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.466000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:47:47.468000 audit[1374]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1374 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.468000 audit[1374]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffd9f9f840 a2=0 a3=1 items=0 ppid=1287 pid=1374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.468000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:47:47.470000 audit[1376]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1376 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.470000 audit[1376]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffcdc25450 a2=0 a3=1 items=0 ppid=1287 pid=1376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.470000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:47:47.471927 systemd-networkd[1039]: docker0: Link UP Oct 2 19:47:47.478000 audit[1380]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1380 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.478000 audit[1380]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffec3c6900 a2=0 a3=1 items=0 ppid=1287 pid=1380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.478000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:47:47.479000 audit[1381]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1381 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:47:47.479000 audit[1381]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd3979c20 a2=0 a3=1 items=0 ppid=1287 pid=1381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:47.479000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:47:47.480336 env[1287]: time="2023-10-02T19:47:47.480295703Z" level=info msg="Loading containers: done." Oct 2 19:47:47.502928 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1331585107-merged.mount: Deactivated successfully. Oct 2 19:47:47.508720 env[1287]: time="2023-10-02T19:47:47.508674578Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:47:47.508888 env[1287]: time="2023-10-02T19:47:47.508868637Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:47:47.508997 env[1287]: time="2023-10-02T19:47:47.508971250Z" level=info msg="Daemon has completed initialization" Oct 2 19:47:47.523591 systemd[1]: Started docker.service. Oct 2 19:47:47.523000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:47.530717 env[1287]: time="2023-10-02T19:47:47.530671362Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:47:47.548495 systemd[1]: Reloading. Oct 2 19:47:47.605927 /usr/lib/systemd/system-generators/torcx-generator[1429]: time="2023-10-02T19:47:47Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:47:47.605954 /usr/lib/systemd/system-generators/torcx-generator[1429]: time="2023-10-02T19:47:47Z" level=info msg="torcx already run" Oct 2 19:47:47.665876 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:47:47.665897 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:47:47.682470 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:47:47.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.729000 audit: BPF prog-id=34 op=LOAD Oct 2 19:47:47.729000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:47:47.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.730000 audit: BPF prog-id=35 op=LOAD Oct 2 19:47:47.731000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit: BPF prog-id=36 op=LOAD Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit: BPF prog-id=37 op=LOAD Oct 2 19:47:47.731000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:47:47.731000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit: BPF prog-id=38 op=LOAD Oct 2 19:47:47.732000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit: BPF prog-id=39 op=LOAD Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit: BPF prog-id=40 op=LOAD Oct 2 19:47:47.732000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:47:47.732000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit: BPF prog-id=41 op=LOAD Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.732000 audit: BPF prog-id=42 op=LOAD Oct 2 19:47:47.732000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:47:47.732000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:47:47.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.734000 audit: BPF prog-id=43 op=LOAD Oct 2 19:47:47.734000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:47:47.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.735000 audit: BPF prog-id=44 op=LOAD Oct 2 19:47:47.735000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:47:47.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.736000 audit: BPF prog-id=45 op=LOAD Oct 2 19:47:47.736000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:47:47.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.737000 audit: BPF prog-id=46 op=LOAD Oct 2 19:47:47.737000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:47:47.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.737000 audit: BPF prog-id=47 op=LOAD Oct 2 19:47:47.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:47.737000 audit: BPF prog-id=48 op=LOAD Oct 2 19:47:47.737000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:47:47.737000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:47:47.753965 systemd[1]: Started kubelet.service. Oct 2 19:47:47.753000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:47.923274 kubelet[1466]: E1002 19:47:47.923203 1466 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:47:47.925609 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:47:47.925725 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:47:47.924000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:47:48.075424 env[1142]: time="2023-10-02T19:47:48.075147699Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 19:47:48.817891 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3120362879.mount: Deactivated successfully. Oct 2 19:47:50.778424 env[1142]: time="2023-10-02T19:47:50.778360135Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:47:50.779816 env[1142]: time="2023-10-02T19:47:50.779777088Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:47:50.781449 env[1142]: time="2023-10-02T19:47:50.781410704Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:47:50.783696 env[1142]: time="2023-10-02T19:47:50.783669181Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:47:50.784306 env[1142]: time="2023-10-02T19:47:50.784279839Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99\"" Oct 2 19:47:50.794830 env[1142]: time="2023-10-02T19:47:50.794805260Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 19:47:53.275257 env[1142]: time="2023-10-02T19:47:53.275205413Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:47:53.277728 env[1142]: time="2023-10-02T19:47:53.277699894Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:47:53.279648 env[1142]: time="2023-10-02T19:47:53.279616857Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:47:53.281500 env[1142]: time="2023-10-02T19:47:53.281470963Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:47:53.282365 env[1142]: time="2023-10-02T19:47:53.282336408Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013\"" Oct 2 19:47:53.293516 env[1142]: time="2023-10-02T19:47:53.293482128Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 19:47:55.742367 env[1142]: time="2023-10-02T19:47:55.742282296Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:47:55.743556 env[1142]: time="2023-10-02T19:47:55.743528974Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:47:55.745960 env[1142]: time="2023-10-02T19:47:55.745898726Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:47:55.747744 env[1142]: time="2023-10-02T19:47:55.747714606Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:47:55.748548 env[1142]: time="2023-10-02T19:47:55.748512864Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803\"" Oct 2 19:47:55.759771 env[1142]: time="2023-10-02T19:47:55.759745116Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 19:47:57.138145 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount82098639.mount: Deactivated successfully. Oct 2 19:47:57.668080 env[1142]: time="2023-10-02T19:47:57.668032074Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:47:57.669263 env[1142]: time="2023-10-02T19:47:57.669238414Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:47:57.671217 env[1142]: time="2023-10-02T19:47:57.671191068Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:47:57.672405 env[1142]: time="2023-10-02T19:47:57.672366535Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:47:57.672834 env[1142]: time="2023-10-02T19:47:57.672799548Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343\"" Oct 2 19:47:57.683009 env[1142]: time="2023-10-02T19:47:57.682981627Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:47:58.049789 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:47:58.049961 systemd[1]: Stopped kubelet.service. Oct 2 19:47:58.050743 kernel: kauditd_printk_skb: 259 callbacks suppressed Oct 2 19:47:58.050827 kernel: audit: type=1130 audit(1696276078.048:379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:58.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:58.051349 systemd[1]: Started kubelet.service. Oct 2 19:47:58.048000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:58.055310 kernel: audit: type=1131 audit(1696276078.048:380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:58.055372 kernel: audit: type=1130 audit(1696276078.050:381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:58.050000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:58.094886 kubelet[1515]: E1002 19:47:58.094833 1515 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:47:58.097763 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:47:58.097884 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:47:58.096000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:47:58.100457 kernel: audit: type=1131 audit(1696276078.096:382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:47:58.212103 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1932036695.mount: Deactivated successfully. Oct 2 19:47:58.215933 env[1142]: time="2023-10-02T19:47:58.215885432Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:47:58.217023 env[1142]: time="2023-10-02T19:47:58.216979008Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:47:58.218177 env[1142]: time="2023-10-02T19:47:58.218151530Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:47:58.219425 env[1142]: time="2023-10-02T19:47:58.219391491Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:47:58.220113 env[1142]: time="2023-10-02T19:47:58.220015971Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 19:47:58.229651 env[1142]: time="2023-10-02T19:47:58.229618212Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 19:47:58.941087 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1351080913.mount: Deactivated successfully. Oct 2 19:48:01.336145 env[1142]: time="2023-10-02T19:48:01.336096463Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:01.337689 env[1142]: time="2023-10-02T19:48:01.337663016Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:01.339828 env[1142]: time="2023-10-02T19:48:01.339802711Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:01.344468 env[1142]: time="2023-10-02T19:48:01.344429122Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:01.345210 env[1142]: time="2023-10-02T19:48:01.345169454Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb\"" Oct 2 19:48:01.355351 env[1142]: time="2023-10-02T19:48:01.355327924Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 19:48:03.591133 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount62324458.mount: Deactivated successfully. Oct 2 19:48:04.220526 env[1142]: time="2023-10-02T19:48:04.220479136Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:04.221825 env[1142]: time="2023-10-02T19:48:04.221789675Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:04.223848 env[1142]: time="2023-10-02T19:48:04.223822282Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:04.225107 env[1142]: time="2023-10-02T19:48:04.225073028Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:04.225685 env[1142]: time="2023-10-02T19:48:04.225661579Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\"" Oct 2 19:48:08.167670 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:48:08.167873 systemd[1]: Stopped kubelet.service. Oct 2 19:48:08.166000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:48:08.169261 systemd[1]: Started kubelet.service. Oct 2 19:48:08.166000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:48:08.172785 kernel: audit: type=1130 audit(1696276088.166:383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:48:08.172856 kernel: audit: type=1131 audit(1696276088.166:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:48:08.172881 kernel: audit: type=1130 audit(1696276088.167:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:48:08.167000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:48:08.178208 systemd[1]: Stopping kubelet.service... Oct 2 19:48:08.177000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:48:08.179306 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:48:08.179483 systemd[1]: Stopped kubelet.service. Oct 2 19:48:08.182475 kernel: audit: type=1131 audit(1696276088.177:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:48:08.194191 systemd[1]: Reloading. Oct 2 19:48:08.235985 /usr/lib/systemd/system-generators/torcx-generator[1634]: time="2023-10-02T19:48:08Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:48:08.236012 /usr/lib/systemd/system-generators/torcx-generator[1634]: time="2023-10-02T19:48:08Z" level=info msg="torcx already run" Oct 2 19:48:08.299758 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:48:08.299779 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:48:08.316391 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:48:08.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.365565 kernel: audit: type=1400 audit(1696276088.358:387): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.365615 kernel: audit: type=1400 audit(1696276088.358:388): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.365638 kernel: audit: type=1400 audit(1696276088.358:389): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.370119 kernel: audit: type=1400 audit(1696276088.358:390): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.370163 kernel: audit: type=1400 audit(1696276088.358:391): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.358000 audit: BPF prog-id=49 op=LOAD Oct 2 19:48:08.358000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:48:08.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.361000 audit: BPF prog-id=50 op=LOAD Oct 2 19:48:08.361000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:48:08.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.364000 audit: BPF prog-id=51 op=LOAD Oct 2 19:48:08.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.373450 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:48:08.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.366000 audit: BPF prog-id=52 op=LOAD Oct 2 19:48:08.366000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:48:08.366000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:48:08.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.368000 audit: BPF prog-id=53 op=LOAD Oct 2 19:48:08.368000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:48:08.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.370000 audit: BPF prog-id=54 op=LOAD Oct 2 19:48:08.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.371000 audit: BPF prog-id=55 op=LOAD Oct 2 19:48:08.371000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:48:08.371000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:48:08.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.372000 audit: BPF prog-id=56 op=LOAD Oct 2 19:48:08.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.372000 audit: BPF prog-id=57 op=LOAD Oct 2 19:48:08.372000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:48:08.372000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:48:08.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.374000 audit: BPF prog-id=58 op=LOAD Oct 2 19:48:08.374000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:48:08.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.374000 audit: BPF prog-id=59 op=LOAD Oct 2 19:48:08.374000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:48:08.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.375000 audit: BPF prog-id=60 op=LOAD Oct 2 19:48:08.375000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit: BPF prog-id=61 op=LOAD Oct 2 19:48:08.376000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit: BPF prog-id=62 op=LOAD Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.376000 audit: BPF prog-id=63 op=LOAD Oct 2 19:48:08.376000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:48:08.376000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:48:08.389289 systemd[1]: Started kubelet.service. Oct 2 19:48:08.388000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:48:08.440105 kubelet[1671]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:48:08.440105 kubelet[1671]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:48:08.442271 kubelet[1671]: I1002 19:48:08.442218 1671 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:48:08.444182 kubelet[1671]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:48:08.444182 kubelet[1671]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:48:08.823306 kubelet[1671]: I1002 19:48:08.823234 1671 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:48:08.823306 kubelet[1671]: I1002 19:48:08.823258 1671 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:48:08.823550 kubelet[1671]: I1002 19:48:08.823489 1671 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:48:08.828570 kubelet[1671]: E1002 19:48:08.828548 1671 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.15:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.15:6443: connect: connection refused Oct 2 19:48:08.829321 kubelet[1671]: I1002 19:48:08.829287 1671 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:48:08.831996 kubelet[1671]: W1002 19:48:08.831963 1671 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:48:08.832757 kubelet[1671]: I1002 19:48:08.832732 1671 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:48:08.833077 kubelet[1671]: I1002 19:48:08.833049 1671 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:48:08.833142 kubelet[1671]: I1002 19:48:08.833121 1671 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:48:08.833222 kubelet[1671]: I1002 19:48:08.833203 1671 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:48:08.833222 kubelet[1671]: I1002 19:48:08.833214 1671 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:48:08.833413 kubelet[1671]: I1002 19:48:08.833381 1671 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:48:08.837574 kubelet[1671]: I1002 19:48:08.837550 1671 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:48:08.837574 kubelet[1671]: I1002 19:48:08.837574 1671 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:48:08.837846 kubelet[1671]: I1002 19:48:08.837834 1671 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:48:08.837899 kubelet[1671]: I1002 19:48:08.837850 1671 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:48:08.838401 kubelet[1671]: W1002 19:48:08.838351 1671 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.15:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.15:6443: connect: connection refused Oct 2 19:48:08.838401 kubelet[1671]: W1002 19:48:08.838381 1671 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.15:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.15:6443: connect: connection refused Oct 2 19:48:08.838513 kubelet[1671]: E1002 19:48:08.838410 1671 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.15:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.15:6443: connect: connection refused Oct 2 19:48:08.838513 kubelet[1671]: E1002 19:48:08.838418 1671 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.15:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.15:6443: connect: connection refused Oct 2 19:48:08.839153 kubelet[1671]: I1002 19:48:08.839134 1671 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:48:08.840065 kubelet[1671]: W1002 19:48:08.840042 1671 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:48:08.840576 kubelet[1671]: I1002 19:48:08.840554 1671 server.go:1186] "Started kubelet" Oct 2 19:48:08.841221 kubelet[1671]: E1002 19:48:08.841122 1671 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a621d945431a8", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 48, 8, 840532392, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 48, 8, 840532392, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.0.0.15:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.15:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:48:08.841681 kubelet[1671]: E1002 19:48:08.841632 1671 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:48:08.841681 kubelet[1671]: E1002 19:48:08.841655 1671 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:48:08.842000 audit[1671]: AVC avc: denied { mac_admin } for pid=1671 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.842000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:48:08.842000 audit[1671]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000f54420 a1=4000059548 a2=4000f543f0 a3=25 items=0 ppid=1 pid=1671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.842000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:48:08.842000 audit[1671]: AVC avc: denied { mac_admin } for pid=1671 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.842000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:48:08.842000 audit[1671]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400052aac0 a1=4000059560 a2=4000f544b0 a3=25 items=0 ppid=1 pid=1671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.842000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:48:08.843095 kubelet[1671]: I1002 19:48:08.842853 1671 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:48:08.843095 kubelet[1671]: I1002 19:48:08.842902 1671 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:48:08.843095 kubelet[1671]: I1002 19:48:08.842971 1671 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:48:08.843276 kubelet[1671]: I1002 19:48:08.843252 1671 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:48:08.844054 kubelet[1671]: I1002 19:48:08.843973 1671 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:48:08.844843 kubelet[1671]: E1002 19:48:08.844790 1671 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://10.0.0.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.15:6443: connect: connection refused Oct 2 19:48:08.844843 kubelet[1671]: E1002 19:48:08.844809 1671 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:48:08.845050 kubelet[1671]: I1002 19:48:08.845034 1671 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:48:08.845461 kubelet[1671]: I1002 19:48:08.845414 1671 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:48:08.845769 kubelet[1671]: W1002 19:48:08.845734 1671 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.15:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.15:6443: connect: connection refused Oct 2 19:48:08.845912 kubelet[1671]: E1002 19:48:08.845900 1671 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.15:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.15:6443: connect: connection refused Oct 2 19:48:08.845000 audit[1683]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1683 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:08.845000 audit[1683]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe1072dd0 a2=0 a3=1 items=0 ppid=1671 pid=1683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.845000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:48:08.847000 audit[1684]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1684 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:08.847000 audit[1684]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe954ebe0 a2=0 a3=1 items=0 ppid=1671 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.847000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:48:08.849000 audit[1686]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1686 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:08.849000 audit[1686]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffeae9e450 a2=0 a3=1 items=0 ppid=1671 pid=1686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.849000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:48:08.851000 audit[1688]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1688 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:08.851000 audit[1688]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffedd68dd0 a2=0 a3=1 items=0 ppid=1671 pid=1688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.851000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:48:08.862000 audit[1692]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1692 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:08.862000 audit[1692]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffce174730 a2=0 a3=1 items=0 ppid=1671 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.862000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:48:08.864000 audit[1694]: NETFILTER_CFG table=nat:31 family=2 entries=1 op=nft_register_chain pid=1694 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:08.864000 audit[1694]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe9466120 a2=0 a3=1 items=0 ppid=1671 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.864000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:48:08.867636 kubelet[1671]: I1002 19:48:08.867605 1671 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:48:08.867636 kubelet[1671]: I1002 19:48:08.867633 1671 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:48:08.867753 kubelet[1671]: I1002 19:48:08.867653 1671 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:48:08.873647 kubelet[1671]: I1002 19:48:08.873613 1671 policy_none.go:49] "None policy: Start" Oct 2 19:48:08.874247 kubelet[1671]: I1002 19:48:08.874229 1671 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:48:08.874314 kubelet[1671]: I1002 19:48:08.874258 1671 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:48:08.875000 audit[1702]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_rule pid=1702 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:08.875000 audit[1702]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffc2c74260 a2=0 a3=1 items=0 ppid=1671 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.875000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:48:08.878656 systemd[1]: Created slice kubepods.slice. Oct 2 19:48:08.882927 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:48:08.885409 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:48:08.886000 audit[1705]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=1705 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:08.886000 audit[1705]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=ffffd639f0d0 a2=0 a3=1 items=0 ppid=1671 pid=1705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.886000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:48:08.888000 audit[1706]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1706 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:08.888000 audit[1706]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc86c99e0 a2=0 a3=1 items=0 ppid=1671 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.888000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:48:08.890000 audit[1707]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1707 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:08.890000 audit[1707]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe3718580 a2=0 a3=1 items=0 ppid=1671 pid=1707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.890000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:48:08.893397 kubelet[1671]: I1002 19:48:08.893105 1671 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:48:08.893000 audit[1671]: AVC avc: denied { mac_admin } for pid=1671 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:08.893000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:48:08.893000 audit[1671]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000973500 a1=4000d02210 a2=40009734d0 a3=25 items=0 ppid=1 pid=1671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.893000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:48:08.893667 kubelet[1671]: I1002 19:48:08.893516 1671 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:48:08.894000 audit[1709]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=1709 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:08.894000 audit[1709]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffff12668f0 a2=0 a3=1 items=0 ppid=1671 pid=1709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.894000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:48:08.895408 kubelet[1671]: I1002 19:48:08.895385 1671 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:48:08.895721 kubelet[1671]: E1002 19:48:08.895686 1671 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Oct 2 19:48:08.897000 audit[1711]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_rule pid=1711 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:08.897000 audit[1711]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=fffff2daae50 a2=0 a3=1 items=0 ppid=1671 pid=1711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.897000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:48:08.900000 audit[1713]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_rule pid=1713 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:08.900000 audit[1713]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=ffffd2673730 a2=0 a3=1 items=0 ppid=1671 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.900000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:48:08.903000 audit[1715]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=1715 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:08.903000 audit[1715]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=fffffdaf7880 a2=0 a3=1 items=0 ppid=1671 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.903000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:48:08.905000 audit[1717]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=1717 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:08.905000 audit[1717]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=540 a0=3 a1=ffffcf2eb4b0 a2=0 a3=1 items=0 ppid=1671 pid=1717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.905000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:48:08.906721 kubelet[1671]: I1002 19:48:08.906692 1671 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:48:08.907000 audit[1718]: NETFILTER_CFG table=mangle:41 family=10 entries=2 op=nft_register_chain pid=1718 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:08.907000 audit[1718]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffda5c6ab0 a2=0 a3=1 items=0 ppid=1671 pid=1718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.907000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:48:08.907000 audit[1719]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=1719 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:08.907000 audit[1719]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff76e7b20 a2=0 a3=1 items=0 ppid=1671 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.907000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:48:08.908000 audit[1720]: NETFILTER_CFG table=nat:43 family=10 entries=2 op=nft_register_chain pid=1720 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:08.908000 audit[1720]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffd3305c00 a2=0 a3=1 items=0 ppid=1671 pid=1720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.908000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:48:08.908000 audit[1721]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_chain pid=1721 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:08.908000 audit[1721]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffee0160e0 a2=0 a3=1 items=0 ppid=1671 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.908000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:48:08.909000 audit[1722]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=1722 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:08.909000 audit[1722]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc7aa0210 a2=0 a3=1 items=0 ppid=1671 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.909000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:48:08.911000 audit[1724]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_rule pid=1724 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:08.911000 audit[1724]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffff75cce80 a2=0 a3=1 items=0 ppid=1671 pid=1724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.911000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:48:08.912000 audit[1725]: NETFILTER_CFG table=filter:47 family=10 entries=2 op=nft_register_chain pid=1725 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:08.912000 audit[1725]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=ffffc9d58330 a2=0 a3=1 items=0 ppid=1671 pid=1725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.912000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:48:08.914000 audit[1727]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_rule pid=1727 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:08.914000 audit[1727]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=ffffddc36f20 a2=0 a3=1 items=0 ppid=1671 pid=1727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.914000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:48:08.916000 audit[1728]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=1728 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:08.916000 audit[1728]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff77073b0 a2=0 a3=1 items=0 ppid=1671 pid=1728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.916000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:48:08.918000 audit[1729]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_chain pid=1729 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:08.918000 audit[1729]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff8a34510 a2=0 a3=1 items=0 ppid=1671 pid=1729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.918000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:48:08.920000 audit[1731]: NETFILTER_CFG table=nat:51 family=10 entries=1 op=nft_register_rule pid=1731 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:08.920000 audit[1731]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffff20c01d0 a2=0 a3=1 items=0 ppid=1671 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.920000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:48:08.923000 audit[1733]: NETFILTER_CFG table=nat:52 family=10 entries=2 op=nft_register_chain pid=1733 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:08.923000 audit[1733]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffc13699e0 a2=0 a3=1 items=0 ppid=1671 pid=1733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.923000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:48:08.926000 audit[1735]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_rule pid=1735 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:08.926000 audit[1735]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=ffffc311c3e0 a2=0 a3=1 items=0 ppid=1671 pid=1735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.926000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:48:08.928000 audit[1737]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=1737 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:08.928000 audit[1737]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=ffffc37b4050 a2=0 a3=1 items=0 ppid=1671 pid=1737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.928000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:48:08.933000 audit[1739]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=1739 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:08.933000 audit[1739]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=556 a0=3 a1=ffffe53d88a0 a2=0 a3=1 items=0 ppid=1671 pid=1739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.933000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:48:08.935113 kubelet[1671]: I1002 19:48:08.935094 1671 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:48:08.935200 kubelet[1671]: I1002 19:48:08.935189 1671 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:48:08.935264 kubelet[1671]: I1002 19:48:08.935255 1671 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:48:08.935364 kubelet[1671]: E1002 19:48:08.935354 1671 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:48:08.935655 kubelet[1671]: W1002 19:48:08.935626 1671 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.15:6443: connect: connection refused Oct 2 19:48:08.935655 kubelet[1671]: E1002 19:48:08.935661 1671 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.15:6443: connect: connection refused Oct 2 19:48:08.935000 audit[1740]: NETFILTER_CFG table=mangle:56 family=10 entries=1 op=nft_register_chain pid=1740 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:08.935000 audit[1740]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff94193f0 a2=0 a3=1 items=0 ppid=1671 pid=1740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.935000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:48:08.936000 audit[1741]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_chain pid=1741 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:08.936000 audit[1741]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffad3efd0 a2=0 a3=1 items=0 ppid=1671 pid=1741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.936000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:48:08.937000 audit[1742]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=1742 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:08.937000 audit[1742]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc522c110 a2=0 a3=1 items=0 ppid=1671 pid=1742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:08.937000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:48:08.946851 kubelet[1671]: I1002 19:48:08.946824 1671 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:48:08.947176 kubelet[1671]: E1002 19:48:08.947161 1671 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.15:6443/api/v1/nodes\": dial tcp 10.0.0.15:6443: connect: connection refused" node="localhost" Oct 2 19:48:09.036322 kubelet[1671]: I1002 19:48:09.036274 1671 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:48:09.037403 kubelet[1671]: I1002 19:48:09.037380 1671 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:48:09.038382 kubelet[1671]: I1002 19:48:09.038359 1671 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:48:09.039766 kubelet[1671]: I1002 19:48:09.039742 1671 status_manager.go:698] "Failed to get status for pod" podUID=fbbee22b6941d370b4e7de3cf42df07f pod="kube-system/kube-scheduler-localhost" err="Get \"https://10.0.0.15:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-localhost\": dial tcp 10.0.0.15:6443: connect: connection refused" Oct 2 19:48:09.039951 kubelet[1671]: I1002 19:48:09.039927 1671 status_manager.go:698] "Failed to get status for pod" podUID=925fe32d357a8a96f193231fbe3cb971 pod="kube-system/kube-apiserver-localhost" err="Get \"https://10.0.0.15:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-localhost\": dial tcp 10.0.0.15:6443: connect: connection refused" Oct 2 19:48:09.043427 systemd[1]: Created slice kubepods-burstable-podfbbee22b6941d370b4e7de3cf42df07f.slice. Oct 2 19:48:09.044374 kubelet[1671]: I1002 19:48:09.044353 1671 status_manager.go:698] "Failed to get status for pod" podUID=b3fbb6a05b0456c4809ee638aa5cfabe pod="kube-system/kube-controller-manager-localhost" err="Get \"https://10.0.0.15:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-localhost\": dial tcp 10.0.0.15:6443: connect: connection refused" Oct 2 19:48:09.045430 kubelet[1671]: E1002 19:48:09.045408 1671 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://10.0.0.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.15:6443: connect: connection refused Oct 2 19:48:09.046300 kubelet[1671]: I1002 19:48:09.046259 1671 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:48:09.046300 kubelet[1671]: I1002 19:48:09.046292 1671 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/925fe32d357a8a96f193231fbe3cb971-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"925fe32d357a8a96f193231fbe3cb971\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:48:09.046378 kubelet[1671]: I1002 19:48:09.046312 1671 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/925fe32d357a8a96f193231fbe3cb971-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"925fe32d357a8a96f193231fbe3cb971\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:48:09.046378 kubelet[1671]: I1002 19:48:09.046333 1671 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/925fe32d357a8a96f193231fbe3cb971-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"925fe32d357a8a96f193231fbe3cb971\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:48:09.046378 kubelet[1671]: I1002 19:48:09.046352 1671 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:48:09.046378 kubelet[1671]: I1002 19:48:09.046371 1671 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:48:09.046508 kubelet[1671]: I1002 19:48:09.046393 1671 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fbbee22b6941d370b4e7de3cf42df07f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"fbbee22b6941d370b4e7de3cf42df07f\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:48:09.046508 kubelet[1671]: I1002 19:48:09.046431 1671 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:48:09.046508 kubelet[1671]: I1002 19:48:09.046487 1671 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:48:09.057408 systemd[1]: Created slice kubepods-burstable-pod925fe32d357a8a96f193231fbe3cb971.slice. Oct 2 19:48:09.070250 systemd[1]: Created slice kubepods-burstable-podb3fbb6a05b0456c4809ee638aa5cfabe.slice. Oct 2 19:48:09.148900 kubelet[1671]: I1002 19:48:09.148815 1671 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:48:09.149134 kubelet[1671]: E1002 19:48:09.149118 1671 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.15:6443/api/v1/nodes\": dial tcp 10.0.0.15:6443: connect: connection refused" node="localhost" Oct 2 19:48:09.355899 kubelet[1671]: E1002 19:48:09.355512 1671 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:09.356182 env[1142]: time="2023-10-02T19:48:09.356138383Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:fbbee22b6941d370b4e7de3cf42df07f,Namespace:kube-system,Attempt:0,}" Oct 2 19:48:09.359759 kubelet[1671]: E1002 19:48:09.359733 1671 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:09.360121 env[1142]: time="2023-10-02T19:48:09.360084013Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:925fe32d357a8a96f193231fbe3cb971,Namespace:kube-system,Attempt:0,}" Oct 2 19:48:09.373707 kubelet[1671]: E1002 19:48:09.373667 1671 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:09.375403 env[1142]: time="2023-10-02T19:48:09.375167294Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:b3fbb6a05b0456c4809ee638aa5cfabe,Namespace:kube-system,Attempt:0,}" Oct 2 19:48:09.446096 kubelet[1671]: E1002 19:48:09.445986 1671 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://10.0.0.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.15:6443: connect: connection refused Oct 2 19:48:09.551056 kubelet[1671]: I1002 19:48:09.550630 1671 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:48:09.551056 kubelet[1671]: E1002 19:48:09.550951 1671 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.15:6443/api/v1/nodes\": dial tcp 10.0.0.15:6443: connect: connection refused" node="localhost" Oct 2 19:48:09.780391 kubelet[1671]: W1002 19:48:09.780287 1671 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.15:6443: connect: connection refused Oct 2 19:48:09.780391 kubelet[1671]: E1002 19:48:09.780325 1671 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.15:6443: connect: connection refused Oct 2 19:48:09.822997 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount274652410.mount: Deactivated successfully. Oct 2 19:48:09.829127 env[1142]: time="2023-10-02T19:48:09.829093559Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:09.831560 env[1142]: time="2023-10-02T19:48:09.831517403Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:09.833475 env[1142]: time="2023-10-02T19:48:09.833420374Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:09.834264 env[1142]: time="2023-10-02T19:48:09.834230294Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:09.837309 env[1142]: time="2023-10-02T19:48:09.836596961Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:09.839526 env[1142]: time="2023-10-02T19:48:09.839495210Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:09.841628 env[1142]: time="2023-10-02T19:48:09.841306320Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:09.843801 env[1142]: time="2023-10-02T19:48:09.843770002Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:09.844570 env[1142]: time="2023-10-02T19:48:09.844539325Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:09.849500 env[1142]: time="2023-10-02T19:48:09.849463451Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:09.851373 env[1142]: time="2023-10-02T19:48:09.851345645Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:09.853007 env[1142]: time="2023-10-02T19:48:09.852978909Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:09.886061 env[1142]: time="2023-10-02T19:48:09.885374647Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:48:09.886061 env[1142]: time="2023-10-02T19:48:09.885411207Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:48:09.886061 env[1142]: time="2023-10-02T19:48:09.885421156Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:48:09.886061 env[1142]: time="2023-10-02T19:48:09.885766101Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/65827ccd81f469277004b81a562e4d112f3919b251f0715a156a1e081ab9ed04 pid=1754 runtime=io.containerd.runc.v2 Oct 2 19:48:09.888721 env[1142]: time="2023-10-02T19:48:09.888634542Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:48:09.888721 env[1142]: time="2023-10-02T19:48:09.888669624Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:48:09.888721 env[1142]: time="2023-10-02T19:48:09.888679693Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:48:09.888913 env[1142]: time="2023-10-02T19:48:09.888861496Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a0d354fdc6af9daff5c0e696c42e7dafe0b464aa22e57e546757901b8a4b95d7 pid=1770 runtime=io.containerd.runc.v2 Oct 2 19:48:09.890988 env[1142]: time="2023-10-02T19:48:09.890763588Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:48:09.890988 env[1142]: time="2023-10-02T19:48:09.890797391Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:48:09.890988 env[1142]: time="2023-10-02T19:48:09.890806421Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:48:09.890988 env[1142]: time="2023-10-02T19:48:09.890930606Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1cbd3043aba18e047ad937943b70ff81850601b52c59cc66f818f9f35d9ccee0 pid=1775 runtime=io.containerd.runc.v2 Oct 2 19:48:09.900793 systemd[1]: Started cri-containerd-65827ccd81f469277004b81a562e4d112f3919b251f0715a156a1e081ab9ed04.scope. Oct 2 19:48:09.910978 systemd[1]: Started cri-containerd-a0d354fdc6af9daff5c0e696c42e7dafe0b464aa22e57e546757901b8a4b95d7.scope. Oct 2 19:48:09.925797 systemd[1]: Started cri-containerd-1cbd3043aba18e047ad937943b70ff81850601b52c59cc66f818f9f35d9ccee0.scope. Oct 2 19:48:09.931000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.931000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.931000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.931000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.931000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.931000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.931000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.931000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.931000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.931000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.931000 audit: BPF prog-id=64 op=LOAD Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { bpf } for pid=1781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=1754 pid=1781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:09.934000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635383237636364383166343639323737303034623831613536326534 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { perfmon } for pid=1781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=1754 pid=1781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:09.934000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635383237636364383166343639323737303034623831613536326534 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { bpf } for pid=1781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { bpf } for pid=1781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { bpf } for pid=1781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { perfmon } for pid=1781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { perfmon } for pid=1781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { perfmon } for pid=1781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { perfmon } for pid=1781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { perfmon } for pid=1781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { bpf } for pid=1781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { bpf } for pid=1781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit: BPF prog-id=65 op=LOAD Oct 2 19:48:09.934000 audit[1781]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=1754 pid=1781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:09.934000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635383237636364383166343639323737303034623831613536326534 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { bpf } for pid=1781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { bpf } for pid=1781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { perfmon } for pid=1781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { perfmon } for pid=1781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { perfmon } for pid=1781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { perfmon } for pid=1781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { perfmon } for pid=1781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { bpf } for pid=1781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { bpf } for pid=1781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit: BPF prog-id=66 op=LOAD Oct 2 19:48:09.934000 audit[1781]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=1754 pid=1781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:09.934000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635383237636364383166343639323737303034623831613536326534 Oct 2 19:48:09.934000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:48:09.934000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { bpf } for pid=1781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { bpf } for pid=1781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { bpf } for pid=1781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { perfmon } for pid=1781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { perfmon } for pid=1781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { perfmon } for pid=1781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { perfmon } for pid=1781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { perfmon } for pid=1781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { bpf } for pid=1781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit[1781]: AVC avc: denied { bpf } for pid=1781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.934000 audit: BPF prog-id=67 op=LOAD Oct 2 19:48:09.934000 audit[1781]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=1754 pid=1781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:09.934000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635383237636364383166343639323737303034623831613536326534 Oct 2 19:48:09.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.939000 audit: BPF prog-id=68 op=LOAD Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { bpf } for pid=1801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1770 pid=1801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:09.940000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130643335346664633661663964616666356330653639366334326537 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { perfmon } for pid=1801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1770 pid=1801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:09.940000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130643335346664633661663964616666356330653639366334326537 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { bpf } for pid=1801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { bpf } for pid=1801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { bpf } for pid=1801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { perfmon } for pid=1801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { perfmon } for pid=1801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { perfmon } for pid=1801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { perfmon } for pid=1801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { perfmon } for pid=1801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { bpf } for pid=1801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { bpf } for pid=1801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit: BPF prog-id=69 op=LOAD Oct 2 19:48:09.940000 audit[1801]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1770 pid=1801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:09.940000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130643335346664633661663964616666356330653639366334326537 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { bpf } for pid=1801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { bpf } for pid=1801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { perfmon } for pid=1801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { perfmon } for pid=1801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { perfmon } for pid=1801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { perfmon } for pid=1801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { perfmon } for pid=1801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { bpf } for pid=1801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { bpf } for pid=1801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit: BPF prog-id=70 op=LOAD Oct 2 19:48:09.940000 audit[1801]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1770 pid=1801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:09.940000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130643335346664633661663964616666356330653639366334326537 Oct 2 19:48:09.940000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:48:09.940000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { bpf } for pid=1801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { bpf } for pid=1801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { bpf } for pid=1801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { perfmon } for pid=1801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { perfmon } for pid=1801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { perfmon } for pid=1801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { perfmon } for pid=1801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { perfmon } for pid=1801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { bpf } for pid=1801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit[1801]: AVC avc: denied { bpf } for pid=1801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.940000 audit: BPF prog-id=71 op=LOAD Oct 2 19:48:09.940000 audit[1801]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1770 pid=1801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:09.940000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130643335346664633661663964616666356330653639366334326537 Oct 2 19:48:09.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit: BPF prog-id=72 op=LOAD Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=1775 pid=1809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:09.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163626433303433616261313865303437616439333739343362373066 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=1775 pid=1809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:09.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163626433303433616261313865303437616439333739343362373066 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit: BPF prog-id=73 op=LOAD Oct 2 19:48:09.953000 audit[1809]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=1775 pid=1809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:09.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163626433303433616261313865303437616439333739343362373066 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit: BPF prog-id=74 op=LOAD Oct 2 19:48:09.953000 audit[1809]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=1775 pid=1809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:09.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163626433303433616261313865303437616439333739343362373066 Oct 2 19:48:09.953000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:48:09.953000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:09.953000 audit: BPF prog-id=75 op=LOAD Oct 2 19:48:09.953000 audit[1809]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=1775 pid=1809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:09.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163626433303433616261313865303437616439333739343362373066 Oct 2 19:48:09.971477 kubelet[1671]: W1002 19:48:09.970677 1671 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.15:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.15:6443: connect: connection refused Oct 2 19:48:09.971477 kubelet[1671]: E1002 19:48:09.970734 1671 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.15:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.15:6443: connect: connection refused Oct 2 19:48:09.971756 env[1142]: time="2023-10-02T19:48:09.971721645Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:fbbee22b6941d370b4e7de3cf42df07f,Namespace:kube-system,Attempt:0,} returns sandbox id \"a0d354fdc6af9daff5c0e696c42e7dafe0b464aa22e57e546757901b8a4b95d7\"" Oct 2 19:48:09.974037 kubelet[1671]: E1002 19:48:09.973884 1671 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:09.976544 env[1142]: time="2023-10-02T19:48:09.976511757Z" level=info msg="CreateContainer within sandbox \"a0d354fdc6af9daff5c0e696c42e7dafe0b464aa22e57e546757901b8a4b95d7\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:48:09.976970 env[1142]: time="2023-10-02T19:48:09.976943887Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:b3fbb6a05b0456c4809ee638aa5cfabe,Namespace:kube-system,Attempt:0,} returns sandbox id \"65827ccd81f469277004b81a562e4d112f3919b251f0715a156a1e081ab9ed04\"" Oct 2 19:48:09.977554 kubelet[1671]: E1002 19:48:09.977526 1671 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:09.979887 env[1142]: time="2023-10-02T19:48:09.979851686Z" level=info msg="CreateContainer within sandbox \"65827ccd81f469277004b81a562e4d112f3919b251f0715a156a1e081ab9ed04\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:48:09.985063 env[1142]: time="2023-10-02T19:48:09.985019387Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:925fe32d357a8a96f193231fbe3cb971,Namespace:kube-system,Attempt:0,} returns sandbox id \"1cbd3043aba18e047ad937943b70ff81850601b52c59cc66f818f9f35d9ccee0\"" Oct 2 19:48:09.985648 kubelet[1671]: E1002 19:48:09.985478 1671 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:09.987068 env[1142]: time="2023-10-02T19:48:09.987028643Z" level=info msg="CreateContainer within sandbox \"1cbd3043aba18e047ad937943b70ff81850601b52c59cc66f818f9f35d9ccee0\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:48:10.001767 env[1142]: time="2023-10-02T19:48:10.001717549Z" level=info msg="CreateContainer within sandbox \"a0d354fdc6af9daff5c0e696c42e7dafe0b464aa22e57e546757901b8a4b95d7\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"21d42887ebae45a0dca58bab5f040317d5edea64e637ff87d01b64d3283341ed\"" Oct 2 19:48:10.002360 env[1142]: time="2023-10-02T19:48:10.002290004Z" level=info msg="StartContainer for \"21d42887ebae45a0dca58bab5f040317d5edea64e637ff87d01b64d3283341ed\"" Oct 2 19:48:10.003719 env[1142]: time="2023-10-02T19:48:10.003676605Z" level=info msg="CreateContainer within sandbox \"65827ccd81f469277004b81a562e4d112f3919b251f0715a156a1e081ab9ed04\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"dd0b1de3a29c768f59b61e2bc33b141031690faf84a04f8bac7e37b3a1150134\"" Oct 2 19:48:10.004108 env[1142]: time="2023-10-02T19:48:10.004081860Z" level=info msg="StartContainer for \"dd0b1de3a29c768f59b61e2bc33b141031690faf84a04f8bac7e37b3a1150134\"" Oct 2 19:48:10.010428 env[1142]: time="2023-10-02T19:48:10.010354053Z" level=info msg="CreateContainer within sandbox \"1cbd3043aba18e047ad937943b70ff81850601b52c59cc66f818f9f35d9ccee0\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"fc544ba47a22d8b1a9415c7410e8b7ec7f2bf6db8eff8e798105aab455025e1b\"" Oct 2 19:48:10.010897 env[1142]: time="2023-10-02T19:48:10.010832278Z" level=info msg="StartContainer for \"fc544ba47a22d8b1a9415c7410e8b7ec7f2bf6db8eff8e798105aab455025e1b\"" Oct 2 19:48:10.027286 systemd[1]: Started cri-containerd-21d42887ebae45a0dca58bab5f040317d5edea64e637ff87d01b64d3283341ed.scope. Oct 2 19:48:10.035967 systemd[1]: Started cri-containerd-dd0b1de3a29c768f59b61e2bc33b141031690faf84a04f8bac7e37b3a1150134.scope. Oct 2 19:48:10.036779 systemd[1]: Started cri-containerd-fc544ba47a22d8b1a9415c7410e8b7ec7f2bf6db8eff8e798105aab455025e1b.scope. Oct 2 19:48:10.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.070000 audit: BPF prog-id=76 op=LOAD Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=1754 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:10.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464306231646533613239633736386635396236316532626333336231 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=1754 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:10.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464306231646533613239633736386635396236316532626333336231 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit: BPF prog-id=77 op=LOAD Oct 2 19:48:10.071000 audit[1881]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=1754 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:10.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464306231646533613239633736386635396236316532626333336231 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit: BPF prog-id=78 op=LOAD Oct 2 19:48:10.071000 audit[1881]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=1754 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:10.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464306231646533613239633736386635396236316532626333336231 Oct 2 19:48:10.071000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:48:10.071000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.071000 audit: BPF prog-id=79 op=LOAD Oct 2 19:48:10.071000 audit[1881]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=1754 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:10.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464306231646533613239633736386635396236316532626333336231 Oct 2 19:48:10.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.074000 audit: BPF prog-id=80 op=LOAD Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { bpf } for pid=1901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=1775 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:10.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663353434626134376132326438623161393431356337343130653862 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { perfmon } for pid=1901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=1775 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:10.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663353434626134376132326438623161393431356337343130653862 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { bpf } for pid=1901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { bpf } for pid=1901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { bpf } for pid=1901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { perfmon } for pid=1901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { perfmon } for pid=1901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { perfmon } for pid=1901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { perfmon } for pid=1901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { perfmon } for pid=1901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { bpf } for pid=1901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { bpf } for pid=1901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit: BPF prog-id=81 op=LOAD Oct 2 19:48:10.075000 audit[1901]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=1775 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:10.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663353434626134376132326438623161393431356337343130653862 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { bpf } for pid=1901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { bpf } for pid=1901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { perfmon } for pid=1901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { perfmon } for pid=1901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { perfmon } for pid=1901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { perfmon } for pid=1901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { perfmon } for pid=1901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { bpf } for pid=1901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { bpf } for pid=1901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit: BPF prog-id=82 op=LOAD Oct 2 19:48:10.075000 audit[1901]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=1775 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:10.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663353434626134376132326438623161393431356337343130653862 Oct 2 19:48:10.075000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:48:10.075000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { bpf } for pid=1901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { bpf } for pid=1901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { bpf } for pid=1901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { perfmon } for pid=1901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { perfmon } for pid=1901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { perfmon } for pid=1901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { perfmon } for pid=1901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { perfmon } for pid=1901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { bpf } for pid=1901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit[1901]: AVC avc: denied { bpf } for pid=1901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.075000 audit: BPF prog-id=83 op=LOAD Oct 2 19:48:10.075000 audit[1901]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=1775 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:10.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663353434626134376132326438623161393431356337343130653862 Oct 2 19:48:10.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.078000 audit: BPF prog-id=84 op=LOAD Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001cdb38 a2=10 a3=0 items=0 ppid=1770 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:10.080000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231643432383837656261653435613064636135386261623566303430 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001cd5a0 a2=3c a3=0 items=0 ppid=1770 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:10.080000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231643432383837656261653435613064636135386261623566303430 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit: BPF prog-id=85 op=LOAD Oct 2 19:48:10.080000 audit[1883]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001cd8e0 a2=78 a3=0 items=0 ppid=1770 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:10.080000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231643432383837656261653435613064636135386261623566303430 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit: BPF prog-id=86 op=LOAD Oct 2 19:48:10.080000 audit[1883]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001cd670 a2=78 a3=0 items=0 ppid=1770 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:10.080000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231643432383837656261653435613064636135386261623566303430 Oct 2 19:48:10.080000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:48:10.080000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:10.080000 audit: BPF prog-id=87 op=LOAD Oct 2 19:48:10.080000 audit[1883]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001cdb40 a2=78 a3=0 items=0 ppid=1770 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:10.080000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231643432383837656261653435613064636135386261623566303430 Oct 2 19:48:10.105083 env[1142]: time="2023-10-02T19:48:10.105030195Z" level=info msg="StartContainer for \"fc544ba47a22d8b1a9415c7410e8b7ec7f2bf6db8eff8e798105aab455025e1b\" returns successfully" Oct 2 19:48:10.114635 env[1142]: time="2023-10-02T19:48:10.113761210Z" level=info msg="StartContainer for \"21d42887ebae45a0dca58bab5f040317d5edea64e637ff87d01b64d3283341ed\" returns successfully" Oct 2 19:48:10.128190 env[1142]: time="2023-10-02T19:48:10.128068361Z" level=info msg="StartContainer for \"dd0b1de3a29c768f59b61e2bc33b141031690faf84a04f8bac7e37b3a1150134\" returns successfully" Oct 2 19:48:10.246620 kubelet[1671]: E1002 19:48:10.246565 1671 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://10.0.0.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.15:6443: connect: connection refused Oct 2 19:48:10.352517 kubelet[1671]: I1002 19:48:10.352481 1671 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:48:10.941931 kubelet[1671]: E1002 19:48:10.941896 1671 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:10.944645 kubelet[1671]: E1002 19:48:10.944622 1671 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:10.946651 kubelet[1671]: E1002 19:48:10.946629 1671 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:11.864000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:11.864000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4001206000 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:48:11.864000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:11.865000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:11.865000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000137200 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:48:11.865000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:11.948444 kubelet[1671]: E1002 19:48:11.948405 1671 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:11.948962 kubelet[1671]: E1002 19:48:11.948926 1671 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:11.949295 kubelet[1671]: E1002 19:48:11.949270 1671 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:12.949966 kubelet[1671]: E1002 19:48:12.949928 1671 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:13.088000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:13.088000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:13.088000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=44 a1=4002a0d4c0 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:48:13.088000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:48:13.088000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=4002752000 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:48:13.088000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:48:13.088000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7043 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:13.088000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=4000a881b0 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:48:13.088000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:48:13.090000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7051 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:13.090000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400398e300 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:48:13.090000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:48:13.091000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:13.091000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=57 a1=400295ac20 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:48:13.091000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:48:13.091000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:13.091000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=57 a1=400398e6c0 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:48:13.091000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:48:13.157909 kubelet[1671]: E1002 19:48:13.157862 1671 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Oct 2 19:48:13.217552 kubelet[1671]: I1002 19:48:13.217418 1671 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:48:13.840842 kubelet[1671]: I1002 19:48:13.840803 1671 apiserver.go:52] "Watching apiserver" Oct 2 19:48:13.845705 kubelet[1671]: I1002 19:48:13.845681 1671 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:48:13.877070 kubelet[1671]: I1002 19:48:13.876883 1671 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:48:13.954231 kubelet[1671]: E1002 19:48:13.954201 1671 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Oct 2 19:48:13.954734 kubelet[1671]: E1002 19:48:13.954717 1671 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:14.140132 kubelet[1671]: E1002 19:48:14.139929 1671 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a621d945431a8", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 48, 8, 840532392, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 48, 8, 840532392, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:48:14.194849 kubelet[1671]: E1002 19:48:14.194742 1671 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a621d9465352f", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"InvalidDiskCapacity", Message:"invalid capacity 0 on image filesystem", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 48, 8, 841647407, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 48, 8, 841647407, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:48:14.248558 kubelet[1671]: E1002 19:48:14.248469 1671 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a621d95e7c02c", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node localhost status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 48, 8, 866979884, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 48, 8, 866979884, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:48:14.302640 kubelet[1671]: E1002 19:48:14.302530 1671 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a621d95e7d745", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node localhost status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 48, 8, 866985797, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 48, 8, 866985797, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:48:14.358613 kubelet[1671]: E1002 19:48:14.358512 1671 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a621d95e7fee8", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node localhost status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 48, 8, 866995944, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 48, 8, 866995944, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:48:14.415573 kubelet[1671]: E1002 19:48:14.415239 1671 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a621d9789f6e6", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeAllocatableEnforced", Message:"Updated Node Allocatable limit across pods", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 48, 8, 894387942, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 48, 8, 894387942, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:48:14.473004 kubelet[1671]: E1002 19:48:14.472900 1671 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a621d95e7c02c", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node localhost status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 48, 8, 866979884, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 48, 8, 946784186, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:48:14.528816 kubelet[1671]: E1002 19:48:14.528704 1671 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a621d95e7d745", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node localhost status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 48, 8, 866985797, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 48, 8, 946796530, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:48:14.587308 kubelet[1671]: E1002 19:48:14.587174 1671 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a621d95e7fee8", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node localhost status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 48, 8, 866995944, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 48, 8, 946800525, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:48:14.961405 kubelet[1671]: E1002 19:48:14.961368 1671 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:15.953098 kubelet[1671]: E1002 19:48:15.953022 1671 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:15.981320 systemd[1]: Reloading. Oct 2 19:48:16.048030 /usr/lib/systemd/system-generators/torcx-generator[1999]: time="2023-10-02T19:48:16Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:48:16.048058 /usr/lib/systemd/system-generators/torcx-generator[1999]: time="2023-10-02T19:48:16Z" level=info msg="torcx already run" Oct 2 19:48:16.109672 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:48:16.109689 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:48:16.126532 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:48:16.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.186020 kernel: kauditd_printk_skb: 646 callbacks suppressed Oct 2 19:48:16.186097 kernel: audit: type=1400 audit(1696276096.184:711): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.190574 kernel: audit: type=1400 audit(1696276096.185:712): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.192846 kernel: audit: type=1400 audit(1696276096.185:713): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.192894 kernel: audit: type=1400 audit(1696276096.185:714): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.197467 kernel: audit: type=1400 audit(1696276096.185:715): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.197496 kernel: audit: type=1400 audit(1696276096.185:716): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.199777 kernel: audit: type=1400 audit(1696276096.185:717): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.201976 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:48:16.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.202647 kernel: audit: type=1400 audit(1696276096.185:718): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.204885 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:48:16.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.188000 audit: BPF prog-id=88 op=LOAD Oct 2 19:48:16.188000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:48:16.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.190000 audit: BPF prog-id=89 op=LOAD Oct 2 19:48:16.190000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:48:16.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.192000 audit: BPF prog-id=90 op=LOAD Oct 2 19:48:16.192000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:48:16.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.195000 audit: BPF prog-id=91 op=LOAD Oct 2 19:48:16.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.197000 audit: BPF prog-id=92 op=LOAD Oct 2 19:48:16.197000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:48:16.197000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:48:16.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.199000 audit: BPF prog-id=93 op=LOAD Oct 2 19:48:16.199000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:48:16.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.205000 audit: BPF prog-id=94 op=LOAD Oct 2 19:48:16.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.205000 audit: BPF prog-id=95 op=LOAD Oct 2 19:48:16.205000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:48:16.205000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:48:16.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.206000 audit: BPF prog-id=96 op=LOAD Oct 2 19:48:16.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.206000 audit: BPF prog-id=97 op=LOAD Oct 2 19:48:16.206000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:48:16.206000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:48:16.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.207000 audit: BPF prog-id=98 op=LOAD Oct 2 19:48:16.207000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit: BPF prog-id=99 op=LOAD Oct 2 19:48:16.209000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit: BPF prog-id=100 op=LOAD Oct 2 19:48:16.209000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.209000 audit: BPF prog-id=101 op=LOAD Oct 2 19:48:16.209000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:48:16.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.210000 audit: BPF prog-id=102 op=LOAD Oct 2 19:48:16.211000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:48:16.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.211000 audit: BPF prog-id=103 op=LOAD Oct 2 19:48:16.211000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:48:16.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.212000 audit: BPF prog-id=104 op=LOAD Oct 2 19:48:16.212000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:48:16.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.212000 audit: BPF prog-id=105 op=LOAD Oct 2 19:48:16.212000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit: BPF prog-id=106 op=LOAD Oct 2 19:48:16.213000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit: BPF prog-id=107 op=LOAD Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.214000 audit: BPF prog-id=108 op=LOAD Oct 2 19:48:16.214000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:48:16.214000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:48:16.224127 systemd[1]: Stopping kubelet.service... Oct 2 19:48:16.246685 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:48:16.246868 systemd[1]: Stopped kubelet.service. Oct 2 19:48:16.246000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:48:16.248000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:48:16.248545 systemd[1]: Started kubelet.service. Oct 2 19:48:16.309142 kubelet[2038]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:48:16.309142 kubelet[2038]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:48:16.309458 kubelet[2038]: I1002 19:48:16.309208 2038 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:48:16.312156 kubelet[2038]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:48:16.312156 kubelet[2038]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:48:16.315310 kubelet[2038]: I1002 19:48:16.315279 2038 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:48:16.315310 kubelet[2038]: I1002 19:48:16.315306 2038 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:48:16.315488 kubelet[2038]: I1002 19:48:16.315474 2038 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:48:16.316644 kubelet[2038]: I1002 19:48:16.316627 2038 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:48:16.317400 kubelet[2038]: I1002 19:48:16.317381 2038 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:48:16.319199 kubelet[2038]: W1002 19:48:16.319179 2038 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:48:16.319962 kubelet[2038]: I1002 19:48:16.319938 2038 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:48:16.320172 kubelet[2038]: I1002 19:48:16.320155 2038 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:48:16.320229 kubelet[2038]: I1002 19:48:16.320213 2038 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:48:16.320292 kubelet[2038]: I1002 19:48:16.320240 2038 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:48:16.320292 kubelet[2038]: I1002 19:48:16.320250 2038 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:48:16.320292 kubelet[2038]: I1002 19:48:16.320282 2038 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:48:16.322648 kubelet[2038]: I1002 19:48:16.322618 2038 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:48:16.322648 kubelet[2038]: I1002 19:48:16.322638 2038 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:48:16.322731 kubelet[2038]: I1002 19:48:16.322673 2038 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:48:16.322731 kubelet[2038]: I1002 19:48:16.322683 2038 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:48:16.323232 kubelet[2038]: I1002 19:48:16.323196 2038 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:48:16.324782 kubelet[2038]: I1002 19:48:16.324759 2038 server.go:1186] "Started kubelet" Oct 2 19:48:16.325692 kubelet[2038]: I1002 19:48:16.325663 2038 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:48:16.325000 audit[2038]: AVC avc: denied { mac_admin } for pid=2038 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.325000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:48:16.325000 audit[2038]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a1ad80 a1=4000a0a6d8 a2=4000a1ad50 a3=25 items=0 ppid=1 pid=2038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:16.325000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:48:16.326135 kubelet[2038]: I1002 19:48:16.326120 2038 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:48:16.325000 audit[2038]: AVC avc: denied { mac_admin } for pid=2038 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.325000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:48:16.325000 audit[2038]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ecc0e0 a1=4000a0a6f0 a2=4000a1ae10 a3=25 items=0 ppid=1 pid=2038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:16.325000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:48:16.326330 kubelet[2038]: I1002 19:48:16.326261 2038 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:48:16.326389 kubelet[2038]: I1002 19:48:16.326372 2038 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:48:16.326472 kubelet[2038]: I1002 19:48:16.326462 2038 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:48:16.326929 kubelet[2038]: E1002 19:48:16.326891 2038 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:48:16.326929 kubelet[2038]: E1002 19:48:16.326919 2038 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:48:16.336155 kubelet[2038]: I1002 19:48:16.336119 2038 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:48:16.336240 kubelet[2038]: I1002 19:48:16.336228 2038 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:48:16.368000 audit[2062]: USER_ACCT pid=2062 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:48:16.369380 sudo[2062]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:48:16.369000 audit[2062]: CRED_REFR pid=2062 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:48:16.369613 sudo[2062]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:48:16.370000 audit[2062]: USER_START pid=2062 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:48:16.387106 kubelet[2038]: I1002 19:48:16.387085 2038 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:48:16.388957 kubelet[2038]: I1002 19:48:16.388939 2038 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:48:16.389043 kubelet[2038]: I1002 19:48:16.389033 2038 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:48:16.389896 kubelet[2038]: I1002 19:48:16.389878 2038 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:48:16.390243 kubelet[2038]: I1002 19:48:16.390223 2038 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:48:16.390326 kubelet[2038]: I1002 19:48:16.390316 2038 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:48:16.390404 kubelet[2038]: I1002 19:48:16.390393 2038 policy_none.go:49] "None policy: Start" Oct 2 19:48:16.391157 kubelet[2038]: I1002 19:48:16.391139 2038 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:48:16.391298 kubelet[2038]: I1002 19:48:16.391285 2038 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:48:16.391578 kubelet[2038]: I1002 19:48:16.391556 2038 state_mem.go:75] "Updated machine memory state" Oct 2 19:48:16.395366 kubelet[2038]: I1002 19:48:16.395337 2038 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:48:16.394000 audit[2038]: AVC avc: denied { mac_admin } for pid=2038 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:16.394000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:48:16.394000 audit[2038]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400011d530 a1=40012de8b8 a2=400011d4d0 a3=25 items=0 ppid=1 pid=2038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:16.394000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:48:16.395896 kubelet[2038]: I1002 19:48:16.395803 2038 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:48:16.396014 kubelet[2038]: I1002 19:48:16.395987 2038 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:48:16.414295 kubelet[2038]: I1002 19:48:16.414275 2038 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:48:16.414430 kubelet[2038]: I1002 19:48:16.414418 2038 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:48:16.414647 kubelet[2038]: I1002 19:48:16.414635 2038 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:48:16.416148 kubelet[2038]: E1002 19:48:16.415497 2038 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:48:16.436634 kubelet[2038]: I1002 19:48:16.436614 2038 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:48:16.442530 kubelet[2038]: I1002 19:48:16.442508 2038 kubelet_node_status.go:108] "Node was previously registered" node="localhost" Oct 2 19:48:16.442728 kubelet[2038]: I1002 19:48:16.442654 2038 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:48:16.516420 kubelet[2038]: I1002 19:48:16.516316 2038 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:48:16.517435 kubelet[2038]: I1002 19:48:16.517141 2038 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:48:16.517671 kubelet[2038]: I1002 19:48:16.517653 2038 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:48:16.537373 kubelet[2038]: I1002 19:48:16.537350 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/925fe32d357a8a96f193231fbe3cb971-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"925fe32d357a8a96f193231fbe3cb971\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:48:16.537483 kubelet[2038]: I1002 19:48:16.537394 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/925fe32d357a8a96f193231fbe3cb971-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"925fe32d357a8a96f193231fbe3cb971\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:48:16.537483 kubelet[2038]: I1002 19:48:16.537417 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/925fe32d357a8a96f193231fbe3cb971-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"925fe32d357a8a96f193231fbe3cb971\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:48:16.537483 kubelet[2038]: I1002 19:48:16.537436 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:48:16.537483 kubelet[2038]: I1002 19:48:16.537471 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:48:16.537583 kubelet[2038]: I1002 19:48:16.537494 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:48:16.537583 kubelet[2038]: I1002 19:48:16.537516 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:48:16.537583 kubelet[2038]: I1002 19:48:16.537537 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:48:16.537583 kubelet[2038]: I1002 19:48:16.537558 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fbbee22b6941d370b4e7de3cf42df07f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"fbbee22b6941d370b4e7de3cf42df07f\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:48:16.693000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32581 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:48:16.693000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40006aca40 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:48:16.693000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:16.727256 kubelet[2038]: E1002 19:48:16.727217 2038 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 2 19:48:16.727966 kubelet[2038]: E1002 19:48:16.727940 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:16.830750 kubelet[2038]: E1002 19:48:16.830721 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:16.830946 kubelet[2038]: E1002 19:48:16.830756 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:16.850961 sudo[2062]: pam_unix(sudo:session): session closed for user root Oct 2 19:48:16.850000 audit[2062]: USER_END pid=2062 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:48:16.850000 audit[2062]: CRED_DISP pid=2062 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:48:17.323123 kubelet[2038]: I1002 19:48:17.323096 2038 apiserver.go:52] "Watching apiserver" Oct 2 19:48:17.536794 kubelet[2038]: I1002 19:48:17.536762 2038 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:48:17.544935 kubelet[2038]: I1002 19:48:17.544909 2038 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:48:17.929444 kubelet[2038]: E1002 19:48:17.927975 2038 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:48:17.929444 kubelet[2038]: E1002 19:48:17.928402 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:18.058589 sudo[1269]: pam_unix(sudo:session): session closed for user root Oct 2 19:48:18.058000 audit[1269]: USER_END pid=1269 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:48:18.058000 audit[1269]: CRED_DISP pid=1269 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:48:18.059881 sshd[1264]: pam_unix(sshd:session): session closed for user core Oct 2 19:48:18.060000 audit[1264]: USER_END pid=1264 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:48:18.060000 audit[1264]: CRED_DISP pid=1264 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:48:18.062544 systemd[1]: sshd@6-10.0.0.15:22-10.0.0.1:59840.service: Deactivated successfully. Oct 2 19:48:18.062000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.15:22-10.0.0.1:59840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:48:18.063270 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:48:18.063435 systemd[1]: session-7.scope: Consumed 5.740s CPU time. Oct 2 19:48:18.063796 systemd-logind[1128]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:48:18.064415 systemd-logind[1128]: Removed session 7. Oct 2 19:48:18.127084 kubelet[2038]: E1002 19:48:18.127055 2038 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 2 19:48:18.127351 kubelet[2038]: E1002 19:48:18.127339 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:18.328487 kubelet[2038]: E1002 19:48:18.328458 2038 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 2 19:48:18.329254 kubelet[2038]: E1002 19:48:18.329235 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:18.423190 kubelet[2038]: E1002 19:48:18.423157 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:18.423281 kubelet[2038]: E1002 19:48:18.423231 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:18.423395 kubelet[2038]: E1002 19:48:18.423379 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:18.544404 kubelet[2038]: I1002 19:48:18.544372 2038 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=2.5443330509999997 pod.CreationTimestamp="2023-10-02 19:48:16 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:48:18.543775495 +0000 UTC m=+2.290107036" watchObservedRunningTime="2023-10-02 19:48:18.544333051 +0000 UTC m=+2.290664592" Oct 2 19:48:18.928512 kubelet[2038]: I1002 19:48:18.928461 2038 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=2.928387763 pod.CreationTimestamp="2023-10-02 19:48:16 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:48:18.92836332 +0000 UTC m=+2.674694861" watchObservedRunningTime="2023-10-02 19:48:18.928387763 +0000 UTC m=+2.674719304" Oct 2 19:48:19.329153 kubelet[2038]: I1002 19:48:19.328927 2038 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=5.32888935 pod.CreationTimestamp="2023-10-02 19:48:14 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:48:19.328784657 +0000 UTC m=+3.075116198" watchObservedRunningTime="2023-10-02 19:48:19.32888935 +0000 UTC m=+3.075220891" Oct 2 19:48:23.916095 kubelet[2038]: E1002 19:48:23.916029 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:24.431470 kubelet[2038]: E1002 19:48:24.431430 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:25.039114 kubelet[2038]: E1002 19:48:25.039082 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:25.274345 kubelet[2038]: E1002 19:48:25.274308 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:25.433097 kubelet[2038]: E1002 19:48:25.433076 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:25.433509 kubelet[2038]: E1002 19:48:25.433489 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:26.933855 update_engine[1134]: I1002 19:48:26.933792 1134 update_attempter.cc:505] Updating boot flags... Oct 2 19:48:28.852000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:28.855066 kernel: kauditd_printk_skb: 263 callbacks suppressed Oct 2 19:48:28.855150 kernel: audit: type=1400 audit(1696276108.852:970): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:28.852000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000417740 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:48:28.861668 kernel: audit: type=1300 audit(1696276108.852:970): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000417740 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:48:28.861741 kernel: audit: type=1327 audit(1696276108.852:970): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:28.852000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:28.853000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:28.867613 kernel: audit: type=1400 audit(1696276108.853:971): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:28.867673 kernel: audit: type=1300 audit(1696276108.853:971): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40013063c0 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:48:28.853000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40013063c0 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:48:28.853000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:28.874454 kernel: audit: type=1327 audit(1696276108.853:971): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:28.874500 kernel: audit: type=1400 audit(1696276108.854:972): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:28.854000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:28.854000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001306560 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:48:28.881039 kernel: audit: type=1300 audit(1696276108.854:972): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001306560 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:48:28.881078 kernel: audit: type=1327 audit(1696276108.854:972): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:28.854000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:28.855000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:28.887121 kernel: audit: type=1400 audit(1696276108.855:973): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:28.855000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d56100 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:48:28.855000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:29.534637 kubelet[2038]: I1002 19:48:29.534611 2038 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:48:29.534995 env[1142]: time="2023-10-02T19:48:29.534921940Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:48:29.535165 kubelet[2038]: I1002 19:48:29.535087 2038 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:48:30.443078 kubelet[2038]: I1002 19:48:30.443031 2038 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:48:30.447671 systemd[1]: Created slice kubepods-besteffort-pod33a5ebc9_1716_453f_b353_135ebdca9a72.slice. Oct 2 19:48:30.455644 kubelet[2038]: I1002 19:48:30.455611 2038 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:48:30.459985 systemd[1]: Created slice kubepods-burstable-pod42acbbb9_ea23_4993_91c6_a2517c4fca73.slice. Oct 2 19:48:30.461319 kubelet[2038]: W1002 19:48:30.461268 2038 reflector.go:424] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:48:30.461319 kubelet[2038]: E1002 19:48:30.461315 2038 reflector.go:140] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:48:30.461427 kubelet[2038]: W1002 19:48:30.461351 2038 reflector.go:424] object-"kube-system"/"hubble-server-certs": failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:48:30.461427 kubelet[2038]: E1002 19:48:30.461360 2038 reflector.go:140] object-"kube-system"/"hubble-server-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:48:30.461427 kubelet[2038]: W1002 19:48:30.461386 2038 reflector.go:424] object-"kube-system"/"cilium-config": failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:48:30.461427 kubelet[2038]: E1002 19:48:30.461395 2038 reflector.go:140] object-"kube-system"/"cilium-config": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 19:48:30.537016 kubelet[2038]: I1002 19:48:30.536968 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-xtables-lock\") pod \"cilium-5zd68\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " pod="kube-system/cilium-5zd68" Oct 2 19:48:30.537016 kubelet[2038]: I1002 19:48:30.537012 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-lib-modules\") pod \"cilium-5zd68\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " pod="kube-system/cilium-5zd68" Oct 2 19:48:30.537383 kubelet[2038]: I1002 19:48:30.537036 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/42acbbb9-ea23-4993-91c6-a2517c4fca73-clustermesh-secrets\") pod \"cilium-5zd68\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " pod="kube-system/cilium-5zd68" Oct 2 19:48:30.537383 kubelet[2038]: I1002 19:48:30.537086 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-cni-path\") pod \"cilium-5zd68\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " pod="kube-system/cilium-5zd68" Oct 2 19:48:30.537383 kubelet[2038]: I1002 19:48:30.537107 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/33a5ebc9-1716-453f-b353-135ebdca9a72-xtables-lock\") pod \"kube-proxy-qqg5q\" (UID: \"33a5ebc9-1716-453f-b353-135ebdca9a72\") " pod="kube-system/kube-proxy-qqg5q" Oct 2 19:48:30.537383 kubelet[2038]: I1002 19:48:30.537125 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-bpf-maps\") pod \"cilium-5zd68\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " pod="kube-system/cilium-5zd68" Oct 2 19:48:30.537383 kubelet[2038]: I1002 19:48:30.537167 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-host-proc-sys-net\") pod \"cilium-5zd68\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " pod="kube-system/cilium-5zd68" Oct 2 19:48:30.537383 kubelet[2038]: I1002 19:48:30.537243 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-cilium-cgroup\") pod \"cilium-5zd68\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " pod="kube-system/cilium-5zd68" Oct 2 19:48:30.537618 kubelet[2038]: I1002 19:48:30.537285 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-etc-cni-netd\") pod \"cilium-5zd68\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " pod="kube-system/cilium-5zd68" Oct 2 19:48:30.537618 kubelet[2038]: I1002 19:48:30.537309 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-host-proc-sys-kernel\") pod \"cilium-5zd68\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " pod="kube-system/cilium-5zd68" Oct 2 19:48:30.537618 kubelet[2038]: I1002 19:48:30.537335 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-b82d2\" (UniqueName: \"kubernetes.io/projected/42acbbb9-ea23-4993-91c6-a2517c4fca73-kube-api-access-b82d2\") pod \"cilium-5zd68\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " pod="kube-system/cilium-5zd68" Oct 2 19:48:30.537618 kubelet[2038]: I1002 19:48:30.537364 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/33a5ebc9-1716-453f-b353-135ebdca9a72-kube-proxy\") pod \"kube-proxy-qqg5q\" (UID: \"33a5ebc9-1716-453f-b353-135ebdca9a72\") " pod="kube-system/kube-proxy-qqg5q" Oct 2 19:48:30.537618 kubelet[2038]: I1002 19:48:30.537386 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-cilium-run\") pod \"cilium-5zd68\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " pod="kube-system/cilium-5zd68" Oct 2 19:48:30.537724 kubelet[2038]: I1002 19:48:30.537406 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-p24zx\" (UniqueName: \"kubernetes.io/projected/33a5ebc9-1716-453f-b353-135ebdca9a72-kube-api-access-p24zx\") pod \"kube-proxy-qqg5q\" (UID: \"33a5ebc9-1716-453f-b353-135ebdca9a72\") " pod="kube-system/kube-proxy-qqg5q" Oct 2 19:48:30.537724 kubelet[2038]: I1002 19:48:30.537435 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-hostproc\") pod \"cilium-5zd68\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " pod="kube-system/cilium-5zd68" Oct 2 19:48:30.537724 kubelet[2038]: I1002 19:48:30.537478 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/42acbbb9-ea23-4993-91c6-a2517c4fca73-cilium-config-path\") pod \"cilium-5zd68\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " pod="kube-system/cilium-5zd68" Oct 2 19:48:30.537724 kubelet[2038]: I1002 19:48:30.537533 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/33a5ebc9-1716-453f-b353-135ebdca9a72-lib-modules\") pod \"kube-proxy-qqg5q\" (UID: \"33a5ebc9-1716-453f-b353-135ebdca9a72\") " pod="kube-system/kube-proxy-qqg5q" Oct 2 19:48:30.537724 kubelet[2038]: I1002 19:48:30.537562 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/42acbbb9-ea23-4993-91c6-a2517c4fca73-hubble-tls\") pod \"cilium-5zd68\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " pod="kube-system/cilium-5zd68" Oct 2 19:48:30.567550 kubelet[2038]: I1002 19:48:30.567518 2038 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:48:30.572418 systemd[1]: Created slice kubepods-besteffort-pode71044a0_6967_4cdb_9dad_3dd0cf96b265.slice. Oct 2 19:48:30.638952 kubelet[2038]: I1002 19:48:30.638919 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e71044a0-6967-4cdb-9dad-3dd0cf96b265-cilium-config-path\") pod \"cilium-operator-f59cbd8c6-kdzng\" (UID: \"e71044a0-6967-4cdb-9dad-3dd0cf96b265\") " pod="kube-system/cilium-operator-f59cbd8c6-kdzng" Oct 2 19:48:30.639801 kubelet[2038]: I1002 19:48:30.639776 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9bh8v\" (UniqueName: \"kubernetes.io/projected/e71044a0-6967-4cdb-9dad-3dd0cf96b265-kube-api-access-9bh8v\") pod \"cilium-operator-f59cbd8c6-kdzng\" (UID: \"e71044a0-6967-4cdb-9dad-3dd0cf96b265\") " pod="kube-system/cilium-operator-f59cbd8c6-kdzng" Oct 2 19:48:31.055636 kubelet[2038]: E1002 19:48:31.055603 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:31.056682 env[1142]: time="2023-10-02T19:48:31.056282733Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-qqg5q,Uid:33a5ebc9-1716-453f-b353-135ebdca9a72,Namespace:kube-system,Attempt:0,}" Oct 2 19:48:31.070717 env[1142]: time="2023-10-02T19:48:31.070638294Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:48:31.070717 env[1142]: time="2023-10-02T19:48:31.070690698Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:48:31.070717 env[1142]: time="2023-10-02T19:48:31.070700739Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:48:31.070932 env[1142]: time="2023-10-02T19:48:31.070903713Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6937a84bd761630cc78de1ec762fcab9ea5f02a167e63d1bfac290d89c150acc pid=2158 runtime=io.containerd.runc.v2 Oct 2 19:48:31.083138 systemd[1]: Started cri-containerd-6937a84bd761630cc78de1ec762fcab9ea5f02a167e63d1bfac290d89c150acc.scope. Oct 2 19:48:31.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.104000 audit: BPF prog-id=109 op=LOAD Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2158 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639333761383462643736313633306363373864653165633736326663 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2158 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639333761383462643736313633306363373864653165633736326663 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit: BPF prog-id=110 op=LOAD Oct 2 19:48:31.105000 audit[2167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2158 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639333761383462643736313633306363373864653165633736326663 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit: BPF prog-id=111 op=LOAD Oct 2 19:48:31.105000 audit[2167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2158 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639333761383462643736313633306363373864653165633736326663 Oct 2 19:48:31.105000 audit: BPF prog-id=111 op=UNLOAD Oct 2 19:48:31.105000 audit: BPF prog-id=110 op=UNLOAD Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.105000 audit: BPF prog-id=112 op=LOAD Oct 2 19:48:31.105000 audit[2167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2158 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639333761383462643736313633306363373864653165633736326663 Oct 2 19:48:31.119400 env[1142]: time="2023-10-02T19:48:31.119304609Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-qqg5q,Uid:33a5ebc9-1716-453f-b353-135ebdca9a72,Namespace:kube-system,Attempt:0,} returns sandbox id \"6937a84bd761630cc78de1ec762fcab9ea5f02a167e63d1bfac290d89c150acc\"" Oct 2 19:48:31.120069 kubelet[2038]: E1002 19:48:31.120034 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:31.122582 env[1142]: time="2023-10-02T19:48:31.122551755Z" level=info msg="CreateContainer within sandbox \"6937a84bd761630cc78de1ec762fcab9ea5f02a167e63d1bfac290d89c150acc\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:48:31.134983 env[1142]: time="2023-10-02T19:48:31.134801169Z" level=info msg="CreateContainer within sandbox \"6937a84bd761630cc78de1ec762fcab9ea5f02a167e63d1bfac290d89c150acc\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"218eb8ae4669e355c34baaf953f487b45bb05701f1f89ea95a83430cc54e264e\"" Oct 2 19:48:31.135815 env[1142]: time="2023-10-02T19:48:31.135787318Z" level=info msg="StartContainer for \"218eb8ae4669e355c34baaf953f487b45bb05701f1f89ea95a83430cc54e264e\"" Oct 2 19:48:31.152149 systemd[1]: Started cri-containerd-218eb8ae4669e355c34baaf953f487b45bb05701f1f89ea95a83430cc54e264e.scope. Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2158 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231386562386165343636396533353563333462616166393533663438 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit: BPF prog-id=113 op=LOAD Oct 2 19:48:31.180000 audit[2197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2158 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231386562386165343636396533353563333462616166393533663438 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit: BPF prog-id=114 op=LOAD Oct 2 19:48:31.180000 audit[2197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2158 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231386562386165343636396533353563333462616166393533663438 Oct 2 19:48:31.180000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:48:31.180000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:31.180000 audit: BPF prog-id=115 op=LOAD Oct 2 19:48:31.180000 audit[2197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2158 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231386562386165343636396533353563333462616166393533663438 Oct 2 19:48:31.199855 env[1142]: time="2023-10-02T19:48:31.199814904Z" level=info msg="StartContainer for \"218eb8ae4669e355c34baaf953f487b45bb05701f1f89ea95a83430cc54e264e\" returns successfully" Oct 2 19:48:31.293000 audit[2249]: NETFILTER_CFG table=mangle:59 family=10 entries=1 op=nft_register_chain pid=2249 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:31.293000 audit[2249]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd7216a80 a2=0 a3=ffffb46356c0 items=0 ppid=2208 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.293000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:48:31.294000 audit[2250]: NETFILTER_CFG table=mangle:60 family=2 entries=1 op=nft_register_chain pid=2250 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:31.294000 audit[2250]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe6ca7700 a2=0 a3=ffff80bc96c0 items=0 ppid=2208 pid=2250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.294000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:48:31.298000 audit[2251]: NETFILTER_CFG table=nat:61 family=10 entries=1 op=nft_register_chain pid=2251 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:31.298000 audit[2251]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdd2a1420 a2=0 a3=ffffa88266c0 items=0 ppid=2208 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.298000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:48:31.299000 audit[2252]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_chain pid=2252 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:31.299000 audit[2252]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc00227d0 a2=0 a3=ffff9d3296c0 items=0 ppid=2208 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.299000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:48:31.299000 audit[2255]: NETFILTER_CFG table=filter:63 family=10 entries=1 op=nft_register_chain pid=2255 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:31.299000 audit[2255]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd9346a50 a2=0 a3=ffffbde096c0 items=0 ppid=2208 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.299000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:48:31.300000 audit[2256]: NETFILTER_CFG table=filter:64 family=2 entries=1 op=nft_register_chain pid=2256 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:31.300000 audit[2256]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffefdfa70 a2=0 a3=ffff9630b6c0 items=0 ppid=2208 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.300000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:48:31.396000 audit[2257]: NETFILTER_CFG table=filter:65 family=2 entries=1 op=nft_register_chain pid=2257 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:31.396000 audit[2257]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffc6b25050 a2=0 a3=ffff9f7336c0 items=0 ppid=2208 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.396000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:48:31.400000 audit[2259]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_rule pid=2259 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:31.400000 audit[2259]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffffb711110 a2=0 a3=ffffb46f76c0 items=0 ppid=2208 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.400000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:48:31.404000 audit[2262]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_rule pid=2262 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:31.404000 audit[2262]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffeca472f0 a2=0 a3=ffffa701c6c0 items=0 ppid=2208 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.404000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:48:31.405000 audit[2263]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=2263 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:31.405000 audit[2263]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdb005820 a2=0 a3=ffff871456c0 items=0 ppid=2208 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.405000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:48:31.407000 audit[2265]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=2265 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:31.407000 audit[2265]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffee1b5ec0 a2=0 a3=ffff954216c0 items=0 ppid=2208 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.407000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:48:31.408000 audit[2266]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_chain pid=2266 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:31.408000 audit[2266]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff1c7e3a0 a2=0 a3=ffff9851d6c0 items=0 ppid=2208 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.408000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:48:31.411000 audit[2268]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=2268 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:31.411000 audit[2268]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffca28dad0 a2=0 a3=ffffacb366c0 items=0 ppid=2208 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.411000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:48:31.414000 audit[2271]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=2271 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:31.414000 audit[2271]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc2b70910 a2=0 a3=ffff948dd6c0 items=0 ppid=2208 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.414000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:48:31.415000 audit[2272]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=2272 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:31.415000 audit[2272]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd099bdc0 a2=0 a3=ffff884ce6c0 items=0 ppid=2208 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.415000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:48:31.418000 audit[2274]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=2274 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:31.418000 audit[2274]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd149e2d0 a2=0 a3=ffff8f26b6c0 items=0 ppid=2208 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.418000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:48:31.419000 audit[2275]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_chain pid=2275 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:31.419000 audit[2275]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffbb3efb0 a2=0 a3=ffff84bd86c0 items=0 ppid=2208 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.419000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:48:31.421000 audit[2277]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=2277 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:31.421000 audit[2277]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd072bc40 a2=0 a3=ffffb6ef26c0 items=0 ppid=2208 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.421000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:48:31.424000 audit[2280]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=2280 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:31.424000 audit[2280]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffffbd0d00 a2=0 a3=ffff9f1506c0 items=0 ppid=2208 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.424000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:48:31.428000 audit[2283]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=2283 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:31.428000 audit[2283]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffce906c50 a2=0 a3=ffff97b026c0 items=0 ppid=2208 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.428000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:48:31.429000 audit[2284]: NETFILTER_CFG table=nat:79 family=2 entries=1 op=nft_register_chain pid=2284 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:31.429000 audit[2284]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd7b807a0 a2=0 a3=ffffa98856c0 items=0 ppid=2208 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.429000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:48:31.431000 audit[2286]: NETFILTER_CFG table=nat:80 family=2 entries=1 op=nft_register_rule pid=2286 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:31.431000 audit[2286]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffd1911340 a2=0 a3=ffffb4bc56c0 items=0 ppid=2208 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.431000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:48:31.435000 audit[2289]: NETFILTER_CFG table=nat:81 family=2 entries=1 op=nft_register_rule pid=2289 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:48:31.435000 audit[2289]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdcaf9f90 a2=0 a3=ffff8e57a6c0 items=0 ppid=2208 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.435000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:48:31.441856 kubelet[2038]: E1002 19:48:31.441835 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:31.448000 audit[2293]: NETFILTER_CFG table=filter:82 family=2 entries=6 op=nft_register_rule pid=2293 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:48:31.448000 audit[2293]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4028 a0=3 a1=ffffcd8e8bb0 a2=0 a3=ffff8a81e6c0 items=0 ppid=2208 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.448000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:48:31.453000 audit[2293]: NETFILTER_CFG table=nat:83 family=2 entries=17 op=nft_register_chain pid=2293 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:48:31.453000 audit[2293]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffcd8e8bb0 a2=0 a3=ffff8a81e6c0 items=0 ppid=2208 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.453000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:48:31.455000 audit[2298]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2298 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:31.455000 audit[2298]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff41cb910 a2=0 a3=ffffae41d6c0 items=0 ppid=2208 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.455000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:48:31.457000 audit[2300]: NETFILTER_CFG table=filter:85 family=10 entries=2 op=nft_register_chain pid=2300 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:31.457000 audit[2300]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffeda5eb10 a2=0 a3=ffffafcc46c0 items=0 ppid=2208 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.457000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:48:31.461000 audit[2303]: NETFILTER_CFG table=filter:86 family=10 entries=2 op=nft_register_chain pid=2303 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:31.461000 audit[2303]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffda57fdc0 a2=0 a3=ffffa18916c0 items=0 ppid=2208 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.461000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:48:31.462000 audit[2304]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=2304 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:31.462000 audit[2304]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdc1ef180 a2=0 a3=ffff853596c0 items=0 ppid=2208 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.462000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:48:31.465000 audit[2306]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=2306 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:31.465000 audit[2306]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff2deb0e0 a2=0 a3=fffface716c0 items=0 ppid=2208 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.465000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:48:31.466000 audit[2307]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=2307 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:31.466000 audit[2307]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffee12e770 a2=0 a3=ffffbb3d86c0 items=0 ppid=2208 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.466000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:48:31.468000 audit[2309]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=2309 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:31.468000 audit[2309]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc694ff00 a2=0 a3=ffffa3c476c0 items=0 ppid=2208 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.468000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:48:31.471000 audit[2312]: NETFILTER_CFG table=filter:91 family=10 entries=2 op=nft_register_chain pid=2312 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:31.471000 audit[2312]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffd26af480 a2=0 a3=ffff8f0166c0 items=0 ppid=2208 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.471000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:48:31.476000 audit[2313]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_chain pid=2313 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:31.476000 audit[2313]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcaa0dff0 a2=0 a3=ffffb6ed46c0 items=0 ppid=2208 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.476000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:48:31.479000 audit[2315]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=2315 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:31.479000 audit[2315]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc9b04c40 a2=0 a3=ffff9e4e56c0 items=0 ppid=2208 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.479000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:48:31.480000 audit[2316]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_chain pid=2316 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:31.480000 audit[2316]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff386b070 a2=0 a3=ffffa309c6c0 items=0 ppid=2208 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.480000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:48:31.482000 audit[2318]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_rule pid=2318 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:31.482000 audit[2318]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff842e470 a2=0 a3=ffffa40d76c0 items=0 ppid=2208 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.482000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:48:31.486000 audit[2321]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_rule pid=2321 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:31.486000 audit[2321]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc3f9fd10 a2=0 a3=ffffabf686c0 items=0 ppid=2208 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.486000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:48:31.489000 audit[2324]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=2324 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:31.489000 audit[2324]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff24e9ec0 a2=0 a3=ffffbca7c6c0 items=0 ppid=2208 pid=2324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.489000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:48:31.490000 audit[2325]: NETFILTER_CFG table=nat:98 family=10 entries=1 op=nft_register_chain pid=2325 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:31.490000 audit[2325]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff8befd70 a2=0 a3=ffff80e326c0 items=0 ppid=2208 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.490000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:48:31.492000 audit[2327]: NETFILTER_CFG table=nat:99 family=10 entries=2 op=nft_register_chain pid=2327 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:31.492000 audit[2327]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffff915ddd0 a2=0 a3=ffff94fc76c0 items=0 ppid=2208 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.492000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:48:31.495000 audit[2330]: NETFILTER_CFG table=nat:100 family=10 entries=2 op=nft_register_chain pid=2330 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:48:31.495000 audit[2330]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffecd1ef80 a2=0 a3=ffffa1b086c0 items=0 ppid=2208 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.495000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:48:31.502000 audit[2334]: NETFILTER_CFG table=filter:101 family=10 entries=3 op=nft_register_rule pid=2334 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:48:31.502000 audit[2334]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffeb859380 a2=0 a3=ffffa2dbf6c0 items=0 ppid=2208 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.502000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:48:31.503000 audit[2334]: NETFILTER_CFG table=nat:102 family=10 entries=10 op=nft_register_chain pid=2334 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:48:31.503000 audit[2334]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffeb859380 a2=0 a3=ffffa2dbf6c0 items=0 ppid=2208 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:31.503000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:48:31.639890 kubelet[2038]: E1002 19:48:31.639831 2038 projected.go:267] Couldn't get secret kube-system/hubble-server-certs: failed to sync secret cache: timed out waiting for the condition Oct 2 19:48:31.639890 kubelet[2038]: E1002 19:48:31.639855 2038 projected.go:198] Error preparing data for projected volume hubble-tls for pod kube-system/cilium-5zd68: failed to sync secret cache: timed out waiting for the condition Oct 2 19:48:31.640215 kubelet[2038]: E1002 19:48:31.639922 2038 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/42acbbb9-ea23-4993-91c6-a2517c4fca73-hubble-tls podName:42acbbb9-ea23-4993-91c6-a2517c4fca73 nodeName:}" failed. No retries permitted until 2023-10-02 19:48:32.139900518 +0000 UTC m=+15.886232019 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "hubble-tls" (UniqueName: "kubernetes.io/projected/42acbbb9-ea23-4993-91c6-a2517c4fca73-hubble-tls") pod "cilium-5zd68" (UID: "42acbbb9-ea23-4993-91c6-a2517c4fca73") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:48:31.640215 kubelet[2038]: E1002 19:48:31.639951 2038 configmap.go:199] Couldn't get configMap kube-system/cilium-config: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:48:31.640215 kubelet[2038]: E1002 19:48:31.639977 2038 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/42acbbb9-ea23-4993-91c6-a2517c4fca73-cilium-config-path podName:42acbbb9-ea23-4993-91c6-a2517c4fca73 nodeName:}" failed. No retries permitted until 2023-10-02 19:48:32.139970123 +0000 UTC m=+15.886301664 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-config-path" (UniqueName: "kubernetes.io/configmap/42acbbb9-ea23-4993-91c6-a2517c4fca73-cilium-config-path") pod "cilium-5zd68" (UID: "42acbbb9-ea23-4993-91c6-a2517c4fca73") : failed to sync configmap cache: timed out waiting for the condition Oct 2 19:48:31.640215 kubelet[2038]: E1002 19:48:31.640184 2038 secret.go:194] Couldn't get secret kube-system/cilium-clustermesh: failed to sync secret cache: timed out waiting for the condition Oct 2 19:48:31.640340 kubelet[2038]: E1002 19:48:31.640217 2038 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/42acbbb9-ea23-4993-91c6-a2517c4fca73-clustermesh-secrets podName:42acbbb9-ea23-4993-91c6-a2517c4fca73 nodeName:}" failed. No retries permitted until 2023-10-02 19:48:32.140207779 +0000 UTC m=+15.886539320 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "clustermesh-secrets" (UniqueName: "kubernetes.io/secret/42acbbb9-ea23-4993-91c6-a2517c4fca73-clustermesh-secrets") pod "cilium-5zd68" (UID: "42acbbb9-ea23-4993-91c6-a2517c4fca73") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:48:31.648519 kubelet[2038]: I1002 19:48:31.648421 2038 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-qqg5q" podStartSLOduration=1.64839119 pod.CreationTimestamp="2023-10-02 19:48:30 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:48:31.648114251 +0000 UTC m=+15.394445792" watchObservedRunningTime="2023-10-02 19:48:31.64839119 +0000 UTC m=+15.394722731" Oct 2 19:48:31.741364 kubelet[2038]: E1002 19:48:31.741320 2038 configmap.go:199] Couldn't get configMap kube-system/cilium-config: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:48:31.741531 kubelet[2038]: E1002 19:48:31.741389 2038 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/e71044a0-6967-4cdb-9dad-3dd0cf96b265-cilium-config-path podName:e71044a0-6967-4cdb-9dad-3dd0cf96b265 nodeName:}" failed. No retries permitted until 2023-10-02 19:48:32.241368035 +0000 UTC m=+15.987699536 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-config-path" (UniqueName: "kubernetes.io/configmap/e71044a0-6967-4cdb-9dad-3dd0cf96b265-cilium-config-path") pod "cilium-operator-f59cbd8c6-kdzng" (UID: "e71044a0-6967-4cdb-9dad-3dd0cf96b265") : failed to sync configmap cache: timed out waiting for the condition Oct 2 19:48:32.264687 kubelet[2038]: E1002 19:48:32.263517 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:32.264814 env[1142]: time="2023-10-02T19:48:32.263981219Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-5zd68,Uid:42acbbb9-ea23-4993-91c6-a2517c4fca73,Namespace:kube-system,Attempt:0,}" Oct 2 19:48:32.279204 env[1142]: time="2023-10-02T19:48:32.279113666Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:48:32.279204 env[1142]: time="2023-10-02T19:48:32.279160549Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:48:32.279204 env[1142]: time="2023-10-02T19:48:32.279179031Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:48:32.279385 env[1142]: time="2023-10-02T19:48:32.279354642Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045 pid=2345 runtime=io.containerd.runc.v2 Oct 2 19:48:32.297232 systemd[1]: Started cri-containerd-be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045.scope. Oct 2 19:48:32.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit: BPF prog-id=116 op=LOAD Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { bpf } for pid=2354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2345 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:32.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265386230353663656432306133343531646636373965363761343665 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { perfmon } for pid=2354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2345 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:32.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265386230353663656432306133343531646636373965363761343665 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { bpf } for pid=2354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { bpf } for pid=2354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { bpf } for pid=2354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { perfmon } for pid=2354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { perfmon } for pid=2354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { perfmon } for pid=2354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { perfmon } for pid=2354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { perfmon } for pid=2354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { bpf } for pid=2354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { bpf } for pid=2354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit: BPF prog-id=117 op=LOAD Oct 2 19:48:32.320000 audit[2354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2345 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:32.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265386230353663656432306133343531646636373965363761343665 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { bpf } for pid=2354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { bpf } for pid=2354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { perfmon } for pid=2354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { perfmon } for pid=2354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { perfmon } for pid=2354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { perfmon } for pid=2354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { perfmon } for pid=2354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { bpf } for pid=2354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { bpf } for pid=2354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit: BPF prog-id=118 op=LOAD Oct 2 19:48:32.320000 audit[2354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2345 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:32.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265386230353663656432306133343531646636373965363761343665 Oct 2 19:48:32.320000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:48:32.320000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { bpf } for pid=2354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { bpf } for pid=2354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { bpf } for pid=2354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { perfmon } for pid=2354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { perfmon } for pid=2354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { perfmon } for pid=2354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { perfmon } for pid=2354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { perfmon } for pid=2354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { bpf } for pid=2354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit[2354]: AVC avc: denied { bpf } for pid=2354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.320000 audit: BPF prog-id=119 op=LOAD Oct 2 19:48:32.320000 audit[2354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2345 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:32.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265386230353663656432306133343531646636373965363761343665 Oct 2 19:48:32.334924 env[1142]: time="2023-10-02T19:48:32.334882899Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-5zd68,Uid:42acbbb9-ea23-4993-91c6-a2517c4fca73,Namespace:kube-system,Attempt:0,} returns sandbox id \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\"" Oct 2 19:48:32.335793 kubelet[2038]: E1002 19:48:32.335619 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:32.338918 env[1142]: time="2023-10-02T19:48:32.338099673Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:48:32.374718 kubelet[2038]: E1002 19:48:32.374657 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:32.375460 env[1142]: time="2023-10-02T19:48:32.375150700Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-kdzng,Uid:e71044a0-6967-4cdb-9dad-3dd0cf96b265,Namespace:kube-system,Attempt:0,}" Oct 2 19:48:32.403726 env[1142]: time="2023-10-02T19:48:32.403645877Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:48:32.403726 env[1142]: time="2023-10-02T19:48:32.403686600Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:48:32.403726 env[1142]: time="2023-10-02T19:48:32.403696160Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:48:32.403992 env[1142]: time="2023-10-02T19:48:32.403963058Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/acaefea9892b02227a43637751dcd2d3176e9bd6a3d0f87d5910b7f65fb15cd3 pid=2388 runtime=io.containerd.runc.v2 Oct 2 19:48:32.416350 systemd[1]: Started cri-containerd-acaefea9892b02227a43637751dcd2d3176e9bd6a3d0f87d5910b7f65fb15cd3.scope. Oct 2 19:48:32.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.437000 audit: BPF prog-id=120 op=LOAD Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2388 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:32.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163616566656139383932623032323237613433363337373531646364 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2388 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:32.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163616566656139383932623032323237613433363337373531646364 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit: BPF prog-id=121 op=LOAD Oct 2 19:48:32.438000 audit[2398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2388 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:32.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163616566656139383932623032323237613433363337373531646364 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit: BPF prog-id=122 op=LOAD Oct 2 19:48:32.438000 audit[2398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2388 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:32.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163616566656139383932623032323237613433363337373531646364 Oct 2 19:48:32.438000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:48:32.438000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { perfmon } for pid=2398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit[2398]: AVC avc: denied { bpf } for pid=2398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.438000 audit: BPF prog-id=123 op=LOAD Oct 2 19:48:32.438000 audit[2398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2388 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:32.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163616566656139383932623032323237613433363337373531646364 Oct 2 19:48:32.444635 kubelet[2038]: E1002 19:48:32.444290 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:32.460430 env[1142]: time="2023-10-02T19:48:32.460361013Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-kdzng,Uid:e71044a0-6967-4cdb-9dad-3dd0cf96b265,Namespace:kube-system,Attempt:0,} returns sandbox id \"acaefea9892b02227a43637751dcd2d3176e9bd6a3d0f87d5910b7f65fb15cd3\"" Oct 2 19:48:32.461265 kubelet[2038]: E1002 19:48:32.461112 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:36.056573 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1856196463.mount: Deactivated successfully. Oct 2 19:48:36.503384 kubelet[2038]: I1002 19:48:36.503287 2038 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:48:36.503964 kubelet[2038]: I1002 19:48:36.503949 2038 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:48:36.507099 kubelet[2038]: I1002 19:48:36.507072 2038 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:48:36.508379 kubelet[2038]: I1002 19:48:36.508346 2038 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb" size=80539316 Oct 2 19:48:36.508774 env[1142]: time="2023-10-02T19:48:36.508741219Z" level=info msg="RemoveImage \"sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb\"" Oct 2 19:48:36.510601 env[1142]: time="2023-10-02T19:48:36.510573321Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd:3.5.6-0,XXX_unrecognized:[],}" Oct 2 19:48:36.511282 env[1142]: time="2023-10-02T19:48:36.511257559Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,XXX_unrecognized:[],}" Oct 2 19:48:36.511773 env[1142]: time="2023-10-02T19:48:36.511749386Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb,XXX_unrecognized:[],}" Oct 2 19:48:36.573314 env[1142]: time="2023-10-02T19:48:36.573244535Z" level=info msg="RemoveImage \"sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb\" returns successfully" Oct 2 19:48:36.573624 kubelet[2038]: I1002 19:48:36.573599 2038 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0" size=13423150 Oct 2 19:48:36.573848 env[1142]: time="2023-10-02T19:48:36.573820687Z" level=info msg="RemoveImage \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\"" Oct 2 19:48:36.574983 env[1142]: time="2023-10-02T19:48:36.574957990Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns:v1.9.3,XXX_unrecognized:[],}" Oct 2 19:48:36.575509 env[1142]: time="2023-10-02T19:48:36.575490820Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,XXX_unrecognized:[],}" Oct 2 19:48:36.576963 env[1142]: time="2023-10-02T19:48:36.576936061Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0,XXX_unrecognized:[],}" Oct 2 19:48:36.589472 env[1142]: time="2023-10-02T19:48:36.589426557Z" level=info msg="RemoveImage \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\" returns successfully" Oct 2 19:48:36.589809 kubelet[2038]: I1002 19:48:36.589721 2038 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e" size=253553 Oct 2 19:48:36.590036 env[1142]: time="2023-10-02T19:48:36.589996509Z" level=info msg="RemoveImage \"sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e\"" Oct 2 19:48:36.590904 env[1142]: time="2023-10-02T19:48:36.590880838Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause:3.6,XXX_unrecognized:[],}" Oct 2 19:48:36.591454 env[1142]: time="2023-10-02T19:48:36.591428869Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,XXX_unrecognized:[],}" Oct 2 19:48:36.591958 env[1142]: time="2023-10-02T19:48:36.591939977Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,XXX_unrecognized:[],}" Oct 2 19:48:36.593847 env[1142]: time="2023-10-02T19:48:36.593822442Z" level=info msg="RemoveImage \"sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e\" returns successfully" Oct 2 19:48:36.602005 kubelet[2038]: I1002 19:48:36.601971 2038 eviction_manager.go:352] "Eviction manager: able to reduce resource pressure without evicting pods." resourceName="ephemeral-storage" Oct 2 19:48:38.312803 env[1142]: time="2023-10-02T19:48:38.312764351Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:38.314109 env[1142]: time="2023-10-02T19:48:38.314081858Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:38.315564 env[1142]: time="2023-10-02T19:48:38.315529812Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:38.316193 env[1142]: time="2023-10-02T19:48:38.316165165Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 19:48:38.316830 env[1142]: time="2023-10-02T19:48:38.316769636Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:48:38.318412 env[1142]: time="2023-10-02T19:48:38.318385359Z" level=info msg="CreateContainer within sandbox \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:48:38.336911 env[1142]: time="2023-10-02T19:48:38.336853586Z" level=info msg="CreateContainer within sandbox \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da\"" Oct 2 19:48:38.337604 env[1142]: time="2023-10-02T19:48:38.337523021Z" level=info msg="StartContainer for \"f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da\"" Oct 2 19:48:38.359413 systemd[1]: Started cri-containerd-f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da.scope. Oct 2 19:48:38.376860 systemd[1]: cri-containerd-f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da.scope: Deactivated successfully. Oct 2 19:48:38.380316 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da-rootfs.mount: Deactivated successfully. Oct 2 19:48:38.582626 env[1142]: time="2023-10-02T19:48:38.582520669Z" level=info msg="shim disconnected" id=f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da Oct 2 19:48:38.582849 env[1142]: time="2023-10-02T19:48:38.582829125Z" level=warning msg="cleaning up after shim disconnected" id=f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da namespace=k8s.io Oct 2 19:48:38.582912 env[1142]: time="2023-10-02T19:48:38.582899689Z" level=info msg="cleaning up dead shim" Oct 2 19:48:38.592183 env[1142]: time="2023-10-02T19:48:38.592144643Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:48:38Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2446 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:48:38Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:48:38.592722 env[1142]: time="2023-10-02T19:48:38.592623628Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:48:38.592871 env[1142]: time="2023-10-02T19:48:38.592823358Z" level=error msg="Failed to pipe stdout of container \"f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da\"" error="reading from a closed fifo" Oct 2 19:48:38.592871 env[1142]: time="2023-10-02T19:48:38.592847119Z" level=error msg="Failed to pipe stderr of container \"f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da\"" error="reading from a closed fifo" Oct 2 19:48:38.594178 env[1142]: time="2023-10-02T19:48:38.594125905Z" level=error msg="StartContainer for \"f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:48:38.594417 kubelet[2038]: E1002 19:48:38.594395 2038 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da" Oct 2 19:48:38.596733 kubelet[2038]: E1002 19:48:38.596704 2038 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:48:38.596733 kubelet[2038]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:48:38.596733 kubelet[2038]: rm /hostbin/cilium-mount Oct 2 19:48:38.596733 kubelet[2038]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-b82d2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:48:38.596934 kubelet[2038]: E1002 19:48:38.596752 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:48:39.457914 kubelet[2038]: E1002 19:48:39.457880 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:39.463723 env[1142]: time="2023-10-02T19:48:39.463679179Z" level=info msg="CreateContainer within sandbox \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:48:39.474232 env[1142]: time="2023-10-02T19:48:39.474159255Z" level=info msg="CreateContainer within sandbox \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa\"" Oct 2 19:48:39.476604 env[1142]: time="2023-10-02T19:48:39.476565494Z" level=info msg="StartContainer for \"4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa\"" Oct 2 19:48:39.493614 systemd[1]: Started cri-containerd-4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa.scope. Oct 2 19:48:39.514132 systemd[1]: cri-containerd-4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa.scope: Deactivated successfully. Oct 2 19:48:39.586639 env[1142]: time="2023-10-02T19:48:39.586583516Z" level=info msg="shim disconnected" id=4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa Oct 2 19:48:39.586639 env[1142]: time="2023-10-02T19:48:39.586636558Z" level=warning msg="cleaning up after shim disconnected" id=4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa namespace=k8s.io Oct 2 19:48:39.586884 env[1142]: time="2023-10-02T19:48:39.586649399Z" level=info msg="cleaning up dead shim" Oct 2 19:48:39.599492 env[1142]: time="2023-10-02T19:48:39.599436669Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:48:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2483 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:48:39Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:48:39.599763 env[1142]: time="2023-10-02T19:48:39.599698602Z" level=error msg="copy shim log" error="read /proc/self/fd/56: file already closed" Oct 2 19:48:39.600544 env[1142]: time="2023-10-02T19:48:39.600504442Z" level=error msg="Failed to pipe stderr of container \"4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa\"" error="reading from a closed fifo" Oct 2 19:48:39.604544 env[1142]: time="2023-10-02T19:48:39.604497118Z" level=error msg="Failed to pipe stdout of container \"4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa\"" error="reading from a closed fifo" Oct 2 19:48:39.606110 env[1142]: time="2023-10-02T19:48:39.606064076Z" level=error msg="StartContainer for \"4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:48:39.606522 kubelet[2038]: E1002 19:48:39.606280 2038 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa" Oct 2 19:48:39.606522 kubelet[2038]: E1002 19:48:39.606410 2038 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:48:39.606522 kubelet[2038]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:48:39.606522 kubelet[2038]: rm /hostbin/cilium-mount Oct 2 19:48:39.606881 kubelet[2038]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-b82d2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:48:39.607004 kubelet[2038]: E1002 19:48:39.606485 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:48:39.698451 env[1142]: time="2023-10-02T19:48:39.698400426Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:39.699502 env[1142]: time="2023-10-02T19:48:39.699478439Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:39.700720 env[1142]: time="2023-10-02T19:48:39.700693459Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:48:39.701317 env[1142]: time="2023-10-02T19:48:39.701282048Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 19:48:39.704009 env[1142]: time="2023-10-02T19:48:39.703961500Z" level=info msg="CreateContainer within sandbox \"acaefea9892b02227a43637751dcd2d3176e9bd6a3d0f87d5910b7f65fb15cd3\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:48:39.714743 env[1142]: time="2023-10-02T19:48:39.714096840Z" level=info msg="CreateContainer within sandbox \"acaefea9892b02227a43637751dcd2d3176e9bd6a3d0f87d5910b7f65fb15cd3\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9\"" Oct 2 19:48:39.714743 env[1142]: time="2023-10-02T19:48:39.714691349Z" level=info msg="StartContainer for \"e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9\"" Oct 2 19:48:39.730409 systemd[1]: Started cri-containerd-e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9.scope. Oct 2 19:48:39.763468 kernel: kauditd_printk_skb: 348 callbacks suppressed Oct 2 19:48:39.763585 kernel: audit: type=1400 audit(1696276119.753:1078): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.763620 kernel: audit: type=1400 audit(1696276119.753:1079): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.763660 kernel: audit: type=1400 audit(1696276119.753:1080): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.763683 kernel: audit: type=1400 audit(1696276119.753:1081): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.753000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.753000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.753000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.768906 kernel: audit: type=1400 audit(1696276119.753:1082): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.768962 kernel: audit: type=1400 audit(1696276119.753:1083): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.773827 kernel: audit: type=1400 audit(1696276119.753:1084): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.773879 kernel: audit: type=1400 audit(1696276119.753:1085): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.753000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.778944 kernel: audit: type=1400 audit(1696276119.753:1086): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.779001 kernel: audit: type=1400 audit(1696276119.754:1087): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.754000 audit: BPF prog-id=124 op=LOAD Oct 2 19:48:39.755000 audit[2503]: AVC avc: denied { bpf } for pid=2503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.755000 audit[2503]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2388 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:39.755000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537386138663030616562393433313136336538643462663165386533 Oct 2 19:48:39.755000 audit[2503]: AVC avc: denied { perfmon } for pid=2503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.755000 audit[2503]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2388 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:39.755000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537386138663030616562393433313136336538643462663165386533 Oct 2 19:48:39.755000 audit[2503]: AVC avc: denied { bpf } for pid=2503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.755000 audit[2503]: AVC avc: denied { bpf } for pid=2503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.755000 audit[2503]: AVC avc: denied { bpf } for pid=2503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.755000 audit[2503]: AVC avc: denied { perfmon } for pid=2503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.755000 audit[2503]: AVC avc: denied { perfmon } for pid=2503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.755000 audit[2503]: AVC avc: denied { perfmon } for pid=2503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.755000 audit[2503]: AVC avc: denied { perfmon } for pid=2503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.755000 audit[2503]: AVC avc: denied { perfmon } for pid=2503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.755000 audit[2503]: AVC avc: denied { bpf } for pid=2503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.755000 audit[2503]: AVC avc: denied { bpf } for pid=2503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.755000 audit: BPF prog-id=125 op=LOAD Oct 2 19:48:39.755000 audit[2503]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2388 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:39.755000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537386138663030616562393433313136336538643462663165386533 Oct 2 19:48:39.757000 audit[2503]: AVC avc: denied { bpf } for pid=2503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.757000 audit[2503]: AVC avc: denied { bpf } for pid=2503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.757000 audit[2503]: AVC avc: denied { perfmon } for pid=2503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.757000 audit[2503]: AVC avc: denied { perfmon } for pid=2503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.757000 audit[2503]: AVC avc: denied { perfmon } for pid=2503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.757000 audit[2503]: AVC avc: denied { perfmon } for pid=2503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.757000 audit[2503]: AVC avc: denied { perfmon } for pid=2503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.757000 audit[2503]: AVC avc: denied { bpf } for pid=2503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.757000 audit[2503]: AVC avc: denied { bpf } for pid=2503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.757000 audit: BPF prog-id=126 op=LOAD Oct 2 19:48:39.757000 audit[2503]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2388 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:39.757000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537386138663030616562393433313136336538643462663165386533 Oct 2 19:48:39.759000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:48:39.759000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:48:39.759000 audit[2503]: AVC avc: denied { bpf } for pid=2503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.759000 audit[2503]: AVC avc: denied { bpf } for pid=2503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.759000 audit[2503]: AVC avc: denied { bpf } for pid=2503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.759000 audit[2503]: AVC avc: denied { perfmon } for pid=2503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.759000 audit[2503]: AVC avc: denied { perfmon } for pid=2503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.759000 audit[2503]: AVC avc: denied { perfmon } for pid=2503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.759000 audit[2503]: AVC avc: denied { perfmon } for pid=2503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.759000 audit[2503]: AVC avc: denied { perfmon } for pid=2503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.759000 audit[2503]: AVC avc: denied { bpf } for pid=2503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.759000 audit[2503]: AVC avc: denied { bpf } for pid=2503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:39.759000 audit: BPF prog-id=127 op=LOAD Oct 2 19:48:39.759000 audit[2503]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2388 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:39.759000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537386138663030616562393433313136336538643462663165386533 Oct 2 19:48:39.791207 env[1142]: time="2023-10-02T19:48:39.791165518Z" level=info msg="StartContainer for \"e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9\" returns successfully" Oct 2 19:48:39.850000 audit[2514]: AVC avc: denied { map_create } for pid=2514 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c563,c897 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c563,c897 tclass=bpf permissive=0 Oct 2 19:48:39.850000 audit[2514]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=40002ff768 a2=48 a3=0 items=0 ppid=2388 pid=2514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c563,c897 key=(null) Oct 2 19:48:39.850000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:48:40.325106 systemd[1]: run-containerd-runc-k8s.io-4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa-runc.Vr2h0F.mount: Deactivated successfully. Oct 2 19:48:40.325201 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa-rootfs.mount: Deactivated successfully. Oct 2 19:48:40.460459 kubelet[2038]: E1002 19:48:40.460420 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:40.461961 kubelet[2038]: I1002 19:48:40.461681 2038 scope.go:115] "RemoveContainer" containerID="f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da" Oct 2 19:48:40.462062 kubelet[2038]: I1002 19:48:40.461986 2038 scope.go:115] "RemoveContainer" containerID="f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da" Oct 2 19:48:40.463318 env[1142]: time="2023-10-02T19:48:40.463272965Z" level=info msg="RemoveContainer for \"f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da\"" Oct 2 19:48:40.463780 env[1142]: time="2023-10-02T19:48:40.463744027Z" level=info msg="RemoveContainer for \"f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da\"" Oct 2 19:48:40.464048 env[1142]: time="2023-10-02T19:48:40.463830232Z" level=error msg="RemoveContainer for \"f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da\" failed" error="failed to set removing state for container \"f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da\": container is already in removing state" Oct 2 19:48:40.464081 kubelet[2038]: E1002 19:48:40.463979 2038 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da\": container is already in removing state" containerID="f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da" Oct 2 19:48:40.464081 kubelet[2038]: E1002 19:48:40.464015 2038 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da": container is already in removing state; Skipping pod "cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73)" Oct 2 19:48:40.464081 kubelet[2038]: E1002 19:48:40.464062 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:40.464278 kubelet[2038]: E1002 19:48:40.464257 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73)\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:48:40.469432 kubelet[2038]: I1002 19:48:40.469399 2038 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-f59cbd8c6-kdzng" podStartSLOduration=-9.223372026385572e+09 pod.CreationTimestamp="2023-10-02 19:48:30 +0000 UTC" firstStartedPulling="2023-10-02 19:48:32.461554372 +0000 UTC m=+16.207885913" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:48:40.469261809 +0000 UTC m=+24.215593350" watchObservedRunningTime="2023-10-02 19:48:40.469203886 +0000 UTC m=+24.215535427" Oct 2 19:48:40.517870 env[1142]: time="2023-10-02T19:48:40.517821470Z" level=info msg="RemoveContainer for \"f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da\" returns successfully" Oct 2 19:48:41.465030 kubelet[2038]: E1002 19:48:41.464993 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:41.465463 kubelet[2038]: E1002 19:48:41.465026 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:41.465706 kubelet[2038]: E1002 19:48:41.465689 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73)\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:48:41.687766 kubelet[2038]: W1002 19:48:41.687709 2038 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod42acbbb9_ea23_4993_91c6_a2517c4fca73.slice/cri-containerd-f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da.scope WatchSource:0}: container "f76fe611379e174dfab4856166c2ca456c1fb926e459456435de5bb31f5039da" in namespace "k8s.io": not found Oct 2 19:48:44.794065 kubelet[2038]: W1002 19:48:44.794028 2038 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod42acbbb9_ea23_4993_91c6_a2517c4fca73.slice/cri-containerd-4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa.scope WatchSource:0}: task 4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa not found: not found Oct 2 19:48:56.416589 kubelet[2038]: E1002 19:48:56.416553 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:56.421655 env[1142]: time="2023-10-02T19:48:56.421610561Z" level=info msg="CreateContainer within sandbox \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:48:56.431876 env[1142]: time="2023-10-02T19:48:56.431825179Z" level=info msg="CreateContainer within sandbox \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a\"" Oct 2 19:48:56.432614 env[1142]: time="2023-10-02T19:48:56.432547160Z" level=info msg="StartContainer for \"d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a\"" Oct 2 19:48:56.449174 systemd[1]: Started cri-containerd-d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a.scope. Oct 2 19:48:56.466341 systemd[1]: cri-containerd-d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a.scope: Deactivated successfully. Oct 2 19:48:56.470196 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a-rootfs.mount: Deactivated successfully. Oct 2 19:48:56.476836 env[1142]: time="2023-10-02T19:48:56.476784568Z" level=info msg="shim disconnected" id=d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a Oct 2 19:48:56.476836 env[1142]: time="2023-10-02T19:48:56.476834329Z" level=warning msg="cleaning up after shim disconnected" id=d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a namespace=k8s.io Oct 2 19:48:56.477010 env[1142]: time="2023-10-02T19:48:56.476843409Z" level=info msg="cleaning up dead shim" Oct 2 19:48:56.485139 env[1142]: time="2023-10-02T19:48:56.485099410Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:48:56Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2561 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:48:56Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:48:56.485616 env[1142]: time="2023-10-02T19:48:56.485519622Z" level=error msg="copy shim log" error="read /proc/self/fd/63: file already closed" Oct 2 19:48:56.485861 env[1142]: time="2023-10-02T19:48:56.485818511Z" level=error msg="Failed to pipe stderr of container \"d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a\"" error="reading from a closed fifo" Oct 2 19:48:56.486087 env[1142]: time="2023-10-02T19:48:56.486032877Z" level=error msg="Failed to pipe stdout of container \"d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a\"" error="reading from a closed fifo" Oct 2 19:48:56.488036 env[1142]: time="2023-10-02T19:48:56.487975653Z" level=error msg="StartContainer for \"d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:48:56.488186 kubelet[2038]: E1002 19:48:56.488154 2038 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a" Oct 2 19:48:56.488312 kubelet[2038]: E1002 19:48:56.488250 2038 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:48:56.488312 kubelet[2038]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:48:56.488312 kubelet[2038]: rm /hostbin/cilium-mount Oct 2 19:48:56.488312 kubelet[2038]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-b82d2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:48:56.488483 kubelet[2038]: E1002 19:48:56.488284 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:48:57.489144 kubelet[2038]: I1002 19:48:57.489115 2038 scope.go:115] "RemoveContainer" containerID="4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa" Oct 2 19:48:57.491969 env[1142]: time="2023-10-02T19:48:57.491932851Z" level=info msg="RemoveContainer for \"4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa\"" Oct 2 19:48:57.493020 kubelet[2038]: I1002 19:48:57.493000 2038 scope.go:115] "RemoveContainer" containerID="4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa" Oct 2 19:48:57.494176 env[1142]: time="2023-10-02T19:48:57.493968989Z" level=info msg="RemoveContainer for \"4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa\"" Oct 2 19:48:57.494176 env[1142]: time="2023-10-02T19:48:57.494047071Z" level=error msg="RemoveContainer for \"4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa\" failed" error="failed to set removing state for container \"4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa\": container is already in removing state" Oct 2 19:48:57.494251 kubelet[2038]: E1002 19:48:57.494223 2038 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa\": container is already in removing state" containerID="4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa" Oct 2 19:48:57.494279 kubelet[2038]: E1002 19:48:57.494254 2038 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa": container is already in removing state; Skipping pod "cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73)" Oct 2 19:48:57.494337 kubelet[2038]: E1002 19:48:57.494309 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:48:57.494768 kubelet[2038]: E1002 19:48:57.494701 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73)\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:48:57.497347 env[1142]: time="2023-10-02T19:48:57.497321964Z" level=info msg="RemoveContainer for \"4b9b568818bf045da0c11c8fd25a9ccac2cf0a9b0b2614a7ad7f89cd9d88deaa\" returns successfully" Oct 2 19:48:59.582017 kubelet[2038]: W1002 19:48:59.581974 2038 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod42acbbb9_ea23_4993_91c6_a2517c4fca73.slice/cri-containerd-d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a.scope WatchSource:0}: task d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a not found: not found Oct 2 19:49:01.952000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.15:22-10.0.0.1:58466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:49:01.954010 systemd[1]: Started sshd@7-10.0.0.15:22-10.0.0.1:58466.service. Oct 2 19:49:01.955031 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:49:01.955086 kernel: audit: type=1130 audit(1696276141.952:1097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.15:22-10.0.0.1:58466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:49:01.991000 audit[2577]: USER_ACCT pid=2577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:01.993370 sshd[2577]: Accepted publickey for core from 10.0.0.1 port 58466 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:49:01.994759 sshd[2577]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:49:01.992000 audit[2577]: CRED_ACQ pid=2577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:01.998494 systemd-logind[1128]: New session 8 of user core. Oct 2 19:49:01.999536 kernel: audit: type=1101 audit(1696276141.991:1098): pid=2577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:01.999568 kernel: audit: type=1103 audit(1696276141.992:1099): pid=2577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:01.999586 kernel: audit: type=1006 audit(1696276141.992:1100): pid=2577 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 19:49:01.999116 systemd[1]: Started session-8.scope. Oct 2 19:49:01.992000 audit[2577]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcecb3a00 a2=3 a3=1 items=0 ppid=1 pid=2577 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:49:02.004219 kernel: audit: type=1300 audit(1696276141.992:1100): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcecb3a00 a2=3 a3=1 items=0 ppid=1 pid=2577 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:49:02.004277 kernel: audit: type=1327 audit(1696276141.992:1100): proctitle=737368643A20636F7265205B707269765D Oct 2 19:49:01.992000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:49:02.001000 audit[2577]: USER_START pid=2577 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:02.008593 kernel: audit: type=1105 audit(1696276142.001:1101): pid=2577 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:02.008662 kernel: audit: type=1103 audit(1696276142.003:1102): pid=2579 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:02.003000 audit[2579]: CRED_ACQ pid=2579 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:02.130986 sshd[2577]: pam_unix(sshd:session): session closed for user core Oct 2 19:49:02.130000 audit[2577]: USER_END pid=2577 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:02.133934 systemd[1]: sshd@7-10.0.0.15:22-10.0.0.1:58466.service: Deactivated successfully. Oct 2 19:49:02.134673 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:49:02.135222 systemd-logind[1128]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:49:02.130000 audit[2577]: CRED_DISP pid=2577 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:02.136154 systemd-logind[1128]: Removed session 8. Oct 2 19:49:02.138245 kernel: audit: type=1106 audit(1696276142.130:1103): pid=2577 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:02.138312 kernel: audit: type=1104 audit(1696276142.130:1104): pid=2577 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:02.132000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.15:22-10.0.0.1:58466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:49:08.415675 kubelet[2038]: E1002 19:49:08.415648 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:49:08.416310 kubelet[2038]: E1002 19:49:08.416293 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73)\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:49:11.865000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:49:11.869451 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:49:11.869604 kernel: audit: type=1400 audit(1696276151.865:1106): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:49:11.869629 kernel: audit: type=1300 audit(1696276151.865:1106): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f4e1e0 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:49:11.865000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f4e1e0 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:49:11.865000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:49:11.876644 kernel: audit: type=1327 audit(1696276151.865:1106): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:49:11.876729 kernel: audit: type=1400 audit(1696276151.867:1107): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:49:11.867000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:49:11.867000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400150e280 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:49:11.883393 kernel: audit: type=1300 audit(1696276151.867:1107): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400150e280 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:49:11.883467 kernel: audit: type=1327 audit(1696276151.867:1107): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:49:11.867000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:49:12.136310 systemd[1]: Started sshd@8-10.0.0.15:22-10.0.0.1:33710.service. Oct 2 19:49:12.135000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.15:22-10.0.0.1:33710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:49:12.140462 kernel: audit: type=1130 audit(1696276152.135:1108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.15:22-10.0.0.1:33710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:49:12.170000 audit[2593]: USER_ACCT pid=2593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:12.171496 sshd[2593]: Accepted publickey for core from 10.0.0.1 port 33710 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:49:12.172681 sshd[2593]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:49:12.171000 audit[2593]: CRED_ACQ pid=2593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:12.178291 kernel: audit: type=1101 audit(1696276152.170:1109): pid=2593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:12.178359 kernel: audit: type=1103 audit(1696276152.171:1110): pid=2593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:12.180486 kernel: audit: type=1006 audit(1696276152.171:1111): pid=2593 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 2 19:49:12.171000 audit[2593]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff033d280 a2=3 a3=1 items=0 ppid=1 pid=2593 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:49:12.171000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:49:12.182494 systemd-logind[1128]: New session 9 of user core. Oct 2 19:49:12.182627 systemd[1]: Started session-9.scope. Oct 2 19:49:12.185000 audit[2593]: USER_START pid=2593 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:12.187000 audit[2595]: CRED_ACQ pid=2595 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:12.296917 sshd[2593]: pam_unix(sshd:session): session closed for user core Oct 2 19:49:12.297000 audit[2593]: USER_END pid=2593 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:12.297000 audit[2593]: CRED_DISP pid=2593 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:12.299254 systemd[1]: sshd@8-10.0.0.15:22-10.0.0.1:33710.service: Deactivated successfully. Oct 2 19:49:12.299000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.15:22-10.0.0.1:33710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:49:12.300116 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:49:12.300613 systemd-logind[1128]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:49:12.301331 systemd-logind[1128]: Removed session 9. Oct 2 19:49:13.088000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:49:13.088000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400dd89de0 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:49:13.088000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:49:13.088000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:49:13.088000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400bd141e0 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:49:13.088000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:49:13.089000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7043 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:49:13.089000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400b8a6f90 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:49:13.089000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:49:13.090000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7051 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:49:13.090000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400bbf42d0 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:49:13.090000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:49:13.092000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:49:13.092000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=400d547920 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:49:13.092000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:49:13.092000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:49:13.092000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400bbf4300 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:49:13.092000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:49:22.301337 systemd[1]: Started sshd@9-10.0.0.15:22-10.0.0.1:43420.service. Oct 2 19:49:22.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.15:22-10.0.0.1:43420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:49:22.304824 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:49:22.304905 kernel: audit: type=1130 audit(1696276162.301:1123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.15:22-10.0.0.1:43420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:49:22.335000 audit[2610]: USER_ACCT pid=2610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:22.336522 sshd[2610]: Accepted publickey for core from 10.0.0.1 port 43420 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:49:22.337947 sshd[2610]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:49:22.337000 audit[2610]: CRED_ACQ pid=2610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:22.341830 systemd[1]: Started session-10.scope. Oct 2 19:49:22.342507 kernel: audit: type=1101 audit(1696276162.335:1124): pid=2610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:22.342578 kernel: audit: type=1103 audit(1696276162.337:1125): pid=2610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:22.342602 kernel: audit: type=1006 audit(1696276162.337:1126): pid=2610 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:49:22.342237 systemd-logind[1128]: New session 10 of user core. Oct 2 19:49:22.337000 audit[2610]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde384370 a2=3 a3=1 items=0 ppid=1 pid=2610 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:49:22.348234 kernel: audit: type=1300 audit(1696276162.337:1126): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde384370 a2=3 a3=1 items=0 ppid=1 pid=2610 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:49:22.348557 kernel: audit: type=1327 audit(1696276162.337:1126): proctitle=737368643A20636F7265205B707269765D Oct 2 19:49:22.337000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:49:22.346000 audit[2610]: USER_START pid=2610 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:22.352196 kernel: audit: type=1105 audit(1696276162.346:1127): pid=2610 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:22.348000 audit[2612]: CRED_ACQ pid=2612 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:22.355005 kernel: audit: type=1103 audit(1696276162.348:1128): pid=2612 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:22.424774 kubelet[2038]: E1002 19:49:22.424734 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:49:22.427312 env[1142]: time="2023-10-02T19:49:22.427263709Z" level=info msg="CreateContainer within sandbox \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:49:22.437058 env[1142]: time="2023-10-02T19:49:22.437012815Z" level=info msg="CreateContainer within sandbox \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3\"" Oct 2 19:49:22.437523 env[1142]: time="2023-10-02T19:49:22.437497214Z" level=info msg="StartContainer for \"9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3\"" Oct 2 19:49:22.457837 systemd[1]: Started cri-containerd-9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3.scope. Oct 2 19:49:22.465088 sshd[2610]: pam_unix(sshd:session): session closed for user core Oct 2 19:49:22.465000 audit[2610]: USER_END pid=2610 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:22.468698 systemd[1]: sshd@9-10.0.0.15:22-10.0.0.1:43420.service: Deactivated successfully. Oct 2 19:49:22.469432 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:49:22.470101 systemd-logind[1128]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:49:22.470511 systemd[1]: cri-containerd-9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3.scope: Deactivated successfully. Oct 2 19:49:22.471386 systemd-logind[1128]: Removed session 10. Oct 2 19:49:22.465000 audit[2610]: CRED_DISP pid=2610 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:22.475228 kernel: audit: type=1106 audit(1696276162.465:1129): pid=2610 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:22.475322 kernel: audit: type=1104 audit(1696276162.465:1130): pid=2610 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:22.468000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.15:22-10.0.0.1:43420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:49:22.477730 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3-rootfs.mount: Deactivated successfully. Oct 2 19:49:22.483715 env[1142]: time="2023-10-02T19:49:22.483670266Z" level=info msg="shim disconnected" id=9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3 Oct 2 19:49:22.483857 env[1142]: time="2023-10-02T19:49:22.483718146Z" level=warning msg="cleaning up after shim disconnected" id=9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3 namespace=k8s.io Oct 2 19:49:22.483857 env[1142]: time="2023-10-02T19:49:22.483728906Z" level=info msg="cleaning up dead shim" Oct 2 19:49:22.492498 env[1142]: time="2023-10-02T19:49:22.492458213Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:49:22Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2647 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:49:22Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:49:22.492748 env[1142]: time="2023-10-02T19:49:22.492690372Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 19:49:22.492904 env[1142]: time="2023-10-02T19:49:22.492859812Z" level=error msg="Failed to pipe stdout of container \"9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3\"" error="reading from a closed fifo" Oct 2 19:49:22.492994 env[1142]: time="2023-10-02T19:49:22.492902132Z" level=error msg="Failed to pipe stderr of container \"9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3\"" error="reading from a closed fifo" Oct 2 19:49:22.494309 env[1142]: time="2023-10-02T19:49:22.494259850Z" level=error msg="StartContainer for \"9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:49:22.494516 kubelet[2038]: E1002 19:49:22.494486 2038 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3" Oct 2 19:49:22.494623 kubelet[2038]: E1002 19:49:22.494593 2038 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:49:22.494623 kubelet[2038]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:49:22.494623 kubelet[2038]: rm /hostbin/cilium-mount Oct 2 19:49:22.494623 kubelet[2038]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-b82d2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:49:22.494749 kubelet[2038]: E1002 19:49:22.494637 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:49:22.526981 kubelet[2038]: I1002 19:49:22.526955 2038 scope.go:115] "RemoveContainer" containerID="d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a" Oct 2 19:49:22.527276 kubelet[2038]: I1002 19:49:22.527245 2038 scope.go:115] "RemoveContainer" containerID="d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a" Oct 2 19:49:22.528868 env[1142]: time="2023-10-02T19:49:22.528842479Z" level=info msg="RemoveContainer for \"d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a\"" Oct 2 19:49:22.529494 env[1142]: time="2023-10-02T19:49:22.529242038Z" level=info msg="RemoveContainer for \"d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a\"" Oct 2 19:49:22.530632 env[1142]: time="2023-10-02T19:49:22.529486398Z" level=error msg="RemoveContainer for \"d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a\" failed" error="failed to set removing state for container \"d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a\": container is already in removing state" Oct 2 19:49:22.530863 kubelet[2038]: E1002 19:49:22.530835 2038 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a\": container is already in removing state" containerID="d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a" Oct 2 19:49:22.530927 kubelet[2038]: E1002 19:49:22.530866 2038 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a": container is already in removing state; Skipping pod "cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73)" Oct 2 19:49:22.530927 kubelet[2038]: E1002 19:49:22.530919 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:49:22.531131 kubelet[2038]: E1002 19:49:22.531118 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73)\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:49:22.534445 env[1142]: time="2023-10-02T19:49:22.534415950Z" level=info msg="RemoveContainer for \"d863b513b53520fbfe3aab2c29c607a603c4d808d9e7639bc0324b526789ef1a\" returns successfully" Oct 2 19:49:25.587783 kubelet[2038]: W1002 19:49:25.587736 2038 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod42acbbb9_ea23_4993_91c6_a2517c4fca73.slice/cri-containerd-9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3.scope WatchSource:0}: task 9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3 not found: not found Oct 2 19:49:28.855000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:49:28.859301 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:49:28.859364 kernel: audit: type=1400 audit(1696276168.855:1132): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:49:28.859389 kernel: audit: type=1300 audit(1696276168.855:1132): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001dd1f20 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:49:28.855000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001dd1f20 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:49:28.858000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:49:28.866296 kernel: audit: type=1400 audit(1696276168.858:1133): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:49:28.866355 kernel: audit: type=1300 audit(1696276168.858:1133): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40019edce0 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:49:28.858000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40019edce0 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:49:28.858000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:49:28.873443 kernel: audit: type=1327 audit(1696276168.858:1133): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:49:28.873498 kernel: audit: type=1400 audit(1696276168.859:1134): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:49:28.859000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:49:28.859000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40019edf00 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:49:28.880144 kernel: audit: type=1300 audit(1696276168.859:1134): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40019edf00 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:49:28.880183 kernel: audit: type=1327 audit(1696276168.859:1134): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:49:28.859000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:49:28.855000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:49:28.886571 kernel: audit: type=1327 audit(1696276168.855:1132): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:49:28.886619 kernel: audit: type=1400 audit(1696276168.860:1135): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:49:28.860000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:49:28.860000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001dd1f40 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:49:28.860000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:49:32.469643 systemd[1]: Started sshd@10-10.0.0.15:22-10.0.0.1:34030.service. Oct 2 19:49:32.469000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.15:22-10.0.0.1:34030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:49:32.504000 audit[2662]: USER_ACCT pid=2662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:32.504792 sshd[2662]: Accepted publickey for core from 10.0.0.1 port 34030 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:49:32.505000 audit[2662]: CRED_ACQ pid=2662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:32.505000 audit[2662]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffecc4a2a0 a2=3 a3=1 items=0 ppid=1 pid=2662 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:49:32.505000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:49:32.506335 sshd[2662]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:49:32.509416 systemd-logind[1128]: New session 11 of user core. Oct 2 19:49:32.510192 systemd[1]: Started session-11.scope. Oct 2 19:49:32.512000 audit[2662]: USER_START pid=2662 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:32.514000 audit[2664]: CRED_ACQ pid=2664 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:32.619622 sshd[2662]: pam_unix(sshd:session): session closed for user core Oct 2 19:49:32.620000 audit[2662]: USER_END pid=2662 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:32.620000 audit[2662]: CRED_DISP pid=2662 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:32.622098 systemd[1]: sshd@10-10.0.0.15:22-10.0.0.1:34030.service: Deactivated successfully. Oct 2 19:49:32.621000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.15:22-10.0.0.1:34030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:49:32.622887 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:49:32.623404 systemd-logind[1128]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:49:32.624008 systemd-logind[1128]: Removed session 11. Oct 2 19:49:33.416222 kubelet[2038]: E1002 19:49:33.416184 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:49:38.416277 kubelet[2038]: E1002 19:49:38.416232 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:49:38.416701 kubelet[2038]: E1002 19:49:38.416478 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73)\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:49:42.625000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.15:22-10.0.0.1:57452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:49:42.625716 systemd[1]: Started sshd@11-10.0.0.15:22-10.0.0.1:57452.service. Oct 2 19:49:42.626534 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:49:42.626579 kernel: audit: type=1130 audit(1696276182.625:1145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.15:22-10.0.0.1:57452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:49:42.660000 audit[2676]: USER_ACCT pid=2676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:42.660740 sshd[2676]: Accepted publickey for core from 10.0.0.1 port 57452 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:49:42.662090 sshd[2676]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:49:42.661000 audit[2676]: CRED_ACQ pid=2676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:42.665979 systemd[1]: Started session-12.scope. Oct 2 19:49:42.666388 kernel: audit: type=1101 audit(1696276182.660:1146): pid=2676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:42.666417 kernel: audit: type=1103 audit(1696276182.661:1147): pid=2676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:42.667144 systemd-logind[1128]: New session 12 of user core. Oct 2 19:49:42.668434 kernel: audit: type=1006 audit(1696276182.661:1148): pid=2676 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:49:42.668492 kernel: audit: type=1300 audit(1696276182.661:1148): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdfb5c720 a2=3 a3=1 items=0 ppid=1 pid=2676 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:49:42.661000 audit[2676]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdfb5c720 a2=3 a3=1 items=0 ppid=1 pid=2676 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:49:42.672175 kernel: audit: type=1327 audit(1696276182.661:1148): proctitle=737368643A20636F7265205B707269765D Oct 2 19:49:42.661000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:49:42.672921 kernel: audit: type=1105 audit(1696276182.670:1149): pid=2676 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:42.670000 audit[2676]: USER_START pid=2676 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:42.672000 audit[2678]: CRED_ACQ pid=2678 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:42.678497 kernel: audit: type=1103 audit(1696276182.672:1150): pid=2678 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:42.779129 sshd[2676]: pam_unix(sshd:session): session closed for user core Oct 2 19:49:42.779000 audit[2676]: USER_END pid=2676 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:42.781956 systemd[1]: sshd@11-10.0.0.15:22-10.0.0.1:57452.service: Deactivated successfully. Oct 2 19:49:42.782793 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:49:42.783284 systemd-logind[1128]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:49:42.779000 audit[2676]: CRED_DISP pid=2676 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:42.783917 systemd-logind[1128]: Removed session 12. Oct 2 19:49:42.786164 kernel: audit: type=1106 audit(1696276182.779:1151): pid=2676 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:42.786226 kernel: audit: type=1104 audit(1696276182.779:1152): pid=2676 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:42.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.15:22-10.0.0.1:57452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:49:44.416329 kubelet[2038]: E1002 19:49:44.416283 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:49:45.415710 kubelet[2038]: E1002 19:49:45.415667 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:49:49.415273 kubelet[2038]: E1002 19:49:49.415234 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:49:49.415680 kubelet[2038]: E1002 19:49:49.415632 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73)\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:49:52.784501 systemd[1]: Started sshd@12-10.0.0.15:22-10.0.0.1:45232.service. Oct 2 19:49:52.784000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.15:22-10.0.0.1:45232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:49:52.787920 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:49:52.787982 kernel: audit: type=1130 audit(1696276192.784:1154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.15:22-10.0.0.1:45232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:49:52.818000 audit[2690]: USER_ACCT pid=2690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:52.819553 sshd[2690]: Accepted publickey for core from 10.0.0.1 port 45232 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:49:52.821052 sshd[2690]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:49:52.820000 audit[2690]: CRED_ACQ pid=2690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:52.824477 systemd-logind[1128]: New session 13 of user core. Oct 2 19:49:52.825408 kernel: audit: type=1101 audit(1696276192.818:1155): pid=2690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:52.825472 kernel: audit: type=1103 audit(1696276192.820:1156): pid=2690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:52.825500 kernel: audit: type=1006 audit(1696276192.820:1157): pid=2690 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:49:52.824928 systemd[1]: Started session-13.scope. Oct 2 19:49:52.827039 kernel: audit: type=1300 audit(1696276192.820:1157): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe587a900 a2=3 a3=1 items=0 ppid=1 pid=2690 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:49:52.820000 audit[2690]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe587a900 a2=3 a3=1 items=0 ppid=1 pid=2690 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:49:52.820000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:49:52.831101 kernel: audit: type=1327 audit(1696276192.820:1157): proctitle=737368643A20636F7265205B707269765D Oct 2 19:49:52.831137 kernel: audit: type=1105 audit(1696276192.828:1158): pid=2690 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:52.828000 audit[2690]: USER_START pid=2690 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:52.830000 audit[2692]: CRED_ACQ pid=2692 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:52.837070 kernel: audit: type=1103 audit(1696276192.830:1159): pid=2692 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:52.938677 sshd[2690]: pam_unix(sshd:session): session closed for user core Oct 2 19:49:52.939000 audit[2690]: USER_END pid=2690 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:52.940780 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:49:52.941334 systemd[1]: sshd@12-10.0.0.15:22-10.0.0.1:45232.service: Deactivated successfully. Oct 2 19:49:52.942275 systemd-logind[1128]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:49:52.942891 systemd-logind[1128]: Removed session 13. Oct 2 19:49:52.939000 audit[2690]: CRED_DISP pid=2690 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:52.945777 kernel: audit: type=1106 audit(1696276192.939:1160): pid=2690 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:52.945832 kernel: audit: type=1104 audit(1696276192.939:1161): pid=2690 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:49:52.941000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.15:22-10.0.0.1:45232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:49:53.416303 kubelet[2038]: E1002 19:49:53.416270 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:50:01.415286 kubelet[2038]: E1002 19:50:01.415240 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:50:01.415650 kubelet[2038]: E1002 19:50:01.415543 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73)\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:50:02.944269 systemd[1]: Started sshd@13-10.0.0.15:22-10.0.0.1:42616.service. Oct 2 19:50:02.942000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.15:22-10.0.0.1:42616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:50:02.945502 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:50:02.945551 kernel: audit: type=1130 audit(1696276202.942:1163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.15:22-10.0.0.1:42616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:50:02.977000 audit[2706]: USER_ACCT pid=2706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:02.979157 sshd[2706]: Accepted publickey for core from 10.0.0.1 port 42616 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:50:02.980574 sshd[2706]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:50:02.978000 audit[2706]: CRED_ACQ pid=2706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:02.985168 kernel: audit: type=1101 audit(1696276202.977:1164): pid=2706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:02.985210 kernel: audit: type=1103 audit(1696276202.978:1165): pid=2706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:02.987232 kernel: audit: type=1006 audit(1696276202.978:1166): pid=2706 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:50:02.978000 audit[2706]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb350ac0 a2=3 a3=1 items=0 ppid=1 pid=2706 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:50:02.988533 systemd-logind[1128]: New session 14 of user core. Oct 2 19:50:02.989097 systemd[1]: Started session-14.scope. Oct 2 19:50:02.990460 kernel: audit: type=1300 audit(1696276202.978:1166): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb350ac0 a2=3 a3=1 items=0 ppid=1 pid=2706 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:50:02.990515 kernel: audit: type=1327 audit(1696276202.978:1166): proctitle=737368643A20636F7265205B707269765D Oct 2 19:50:02.978000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:50:02.991000 audit[2706]: USER_START pid=2706 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:02.996464 kernel: audit: type=1105 audit(1696276202.991:1167): pid=2706 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:02.996533 kernel: audit: type=1103 audit(1696276202.995:1168): pid=2708 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:02.995000 audit[2708]: CRED_ACQ pid=2708 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:03.101779 sshd[2706]: pam_unix(sshd:session): session closed for user core Oct 2 19:50:03.101000 audit[2706]: USER_END pid=2706 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:03.104576 systemd[1]: sshd@13-10.0.0.15:22-10.0.0.1:42616.service: Deactivated successfully. Oct 2 19:50:03.105278 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:50:03.105816 systemd-logind[1128]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:50:03.101000 audit[2706]: CRED_DISP pid=2706 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:03.106545 systemd-logind[1128]: Removed session 14. Oct 2 19:50:03.109023 kernel: audit: type=1106 audit(1696276203.101:1169): pid=2706 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:03.109083 kernel: audit: type=1104 audit(1696276203.101:1170): pid=2706 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:03.103000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.15:22-10.0.0.1:42616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:50:08.415710 kubelet[2038]: E1002 19:50:08.415679 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:50:11.865000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:50:11.867312 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:50:11.867369 kernel: audit: type=1400 audit(1696276211.865:1172): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:50:11.865000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000fcf410 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:50:11.874123 kernel: audit: type=1300 audit(1696276211.865:1172): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000fcf410 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:50:11.874186 kernel: audit: type=1327 audit(1696276211.865:1172): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:50:11.865000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:50:11.867000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:50:11.880829 kernel: audit: type=1400 audit(1696276211.867:1173): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:50:11.880880 kernel: audit: type=1300 audit(1696276211.867:1173): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002667240 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:50:11.867000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002667240 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:50:11.867000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:50:11.887982 kernel: audit: type=1327 audit(1696276211.867:1173): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:50:13.087000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:50:13.087000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:50:13.095210 kernel: audit: type=1400 audit(1696276213.087:1175): avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:50:13.095274 kernel: audit: type=1400 audit(1696276213.087:1174): avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:50:13.095296 kernel: audit: type=1300 audit(1696276213.087:1174): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4002c9eae0 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:50:13.087000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4002c9eae0 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:50:13.087000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=400ac8e2a0 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:50:13.102900 kernel: audit: type=1300 audit(1696276213.087:1175): arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=400ac8e2a0 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:50:13.087000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:50:13.087000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:50:13.089000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7043 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:50:13.089000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400abc6e10 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:50:13.089000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:50:13.090000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7051 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:50:13.090000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400a94f530 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:50:13.090000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:50:13.091000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:50:13.091000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4002c801e0 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:50:13.091000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:50:13.091000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:50:13.091000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=400ac8e390 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:50:13.091000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:50:13.107358 systemd[1]: Started sshd@14-10.0.0.15:22-10.0.0.1:53668.service. Oct 2 19:50:13.106000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.15:22-10.0.0.1:53668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:50:13.140000 audit[2720]: USER_ACCT pid=2720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:13.142626 sshd[2720]: Accepted publickey for core from 10.0.0.1 port 53668 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:50:13.141000 audit[2720]: CRED_ACQ pid=2720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:13.141000 audit[2720]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc98b28f0 a2=3 a3=1 items=0 ppid=1 pid=2720 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:50:13.141000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:50:13.143623 sshd[2720]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:50:13.149910 systemd-logind[1128]: New session 15 of user core. Oct 2 19:50:13.150786 systemd[1]: Started session-15.scope. Oct 2 19:50:13.152000 audit[2720]: USER_START pid=2720 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:13.154000 audit[2722]: CRED_ACQ pid=2722 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:13.267144 sshd[2720]: pam_unix(sshd:session): session closed for user core Oct 2 19:50:13.266000 audit[2720]: USER_END pid=2720 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:13.266000 audit[2720]: CRED_DISP pid=2720 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:13.269388 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:50:13.269967 systemd[1]: sshd@14-10.0.0.15:22-10.0.0.1:53668.service: Deactivated successfully. Oct 2 19:50:13.268000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.15:22-10.0.0.1:53668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:50:13.270825 systemd-logind[1128]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:50:13.271369 systemd-logind[1128]: Removed session 15. Oct 2 19:50:15.415983 kubelet[2038]: E1002 19:50:15.415952 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:50:15.417874 env[1142]: time="2023-10-02T19:50:15.417833992Z" level=info msg="CreateContainer within sandbox \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:50:15.425802 env[1142]: time="2023-10-02T19:50:15.425757216Z" level=info msg="CreateContainer within sandbox \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84\"" Oct 2 19:50:15.426182 env[1142]: time="2023-10-02T19:50:15.426162501Z" level=info msg="StartContainer for \"b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84\"" Oct 2 19:50:15.441770 systemd[1]: run-containerd-runc-k8s.io-b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84-runc.uaG4rv.mount: Deactivated successfully. Oct 2 19:50:15.444528 systemd[1]: Started cri-containerd-b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84.scope. Oct 2 19:50:15.480372 systemd[1]: cri-containerd-b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84.scope: Deactivated successfully. Oct 2 19:50:15.490583 env[1142]: time="2023-10-02T19:50:15.490535066Z" level=info msg="shim disconnected" id=b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84 Oct 2 19:50:15.490725 env[1142]: time="2023-10-02T19:50:15.490600427Z" level=warning msg="cleaning up after shim disconnected" id=b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84 namespace=k8s.io Oct 2 19:50:15.490725 env[1142]: time="2023-10-02T19:50:15.490610547Z" level=info msg="cleaning up dead shim" Oct 2 19:50:15.498719 env[1142]: time="2023-10-02T19:50:15.498677733Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:50:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2758 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:50:15Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:50:15.498956 env[1142]: time="2023-10-02T19:50:15.498902816Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 19:50:15.499136 env[1142]: time="2023-10-02T19:50:15.499098218Z" level=error msg="Failed to pipe stderr of container \"b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84\"" error="reading from a closed fifo" Oct 2 19:50:15.499523 env[1142]: time="2023-10-02T19:50:15.499489984Z" level=error msg="Failed to pipe stdout of container \"b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84\"" error="reading from a closed fifo" Oct 2 19:50:15.500986 env[1142]: time="2023-10-02T19:50:15.500945683Z" level=error msg="StartContainer for \"b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:50:15.501180 kubelet[2038]: E1002 19:50:15.501157 2038 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84" Oct 2 19:50:15.501284 kubelet[2038]: E1002 19:50:15.501270 2038 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:50:15.501284 kubelet[2038]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:50:15.501284 kubelet[2038]: rm /hostbin/cilium-mount Oct 2 19:50:15.501284 kubelet[2038]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-b82d2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:50:15.501405 kubelet[2038]: E1002 19:50:15.501312 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:50:15.604293 kubelet[2038]: I1002 19:50:15.604270 2038 scope.go:115] "RemoveContainer" containerID="9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3" Oct 2 19:50:15.604597 kubelet[2038]: I1002 19:50:15.604575 2038 scope.go:115] "RemoveContainer" containerID="9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3" Oct 2 19:50:15.606141 env[1142]: time="2023-10-02T19:50:15.606067302Z" level=info msg="RemoveContainer for \"9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3\"" Oct 2 19:50:15.608061 env[1142]: time="2023-10-02T19:50:15.607982687Z" level=info msg="RemoveContainer for \"9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3\"" Oct 2 19:50:15.608557 env[1142]: time="2023-10-02T19:50:15.608494774Z" level=error msg="RemoveContainer for \"9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3\" failed" error="failed to set removing state for container \"9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3\": container is already in removing state" Oct 2 19:50:15.608720 kubelet[2038]: E1002 19:50:15.608679 2038 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3\": container is already in removing state" containerID="9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3" Oct 2 19:50:15.608766 kubelet[2038]: I1002 19:50:15.608732 2038 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3} err="rpc error: code = Unknown desc = failed to set removing state for container \"9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3\": container is already in removing state" Oct 2 19:50:15.610263 env[1142]: time="2023-10-02T19:50:15.610229237Z" level=info msg="RemoveContainer for \"9e61018236cf6e91495c562790f7350ac450fae1e6b4497302fadb77a840e9b3\" returns successfully" Oct 2 19:50:15.610616 kubelet[2038]: E1002 19:50:15.610436 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:50:15.610720 kubelet[2038]: E1002 19:50:15.610705 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73)\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:50:16.362715 kubelet[2038]: E1002 19:50:16.362679 2038 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:50:16.421583 kubelet[2038]: E1002 19:50:16.421560 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:50:16.423554 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84-rootfs.mount: Deactivated successfully. Oct 2 19:50:18.594328 kubelet[2038]: W1002 19:50:18.594291 2038 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod42acbbb9_ea23_4993_91c6_a2517c4fca73.slice/cri-containerd-b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84.scope WatchSource:0}: task b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84 not found: not found Oct 2 19:50:21.423126 kubelet[2038]: E1002 19:50:21.423090 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:50:23.272402 systemd[1]: Started sshd@15-10.0.0.15:22-10.0.0.1:34788.service. Oct 2 19:50:23.271000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.15:22-10.0.0.1:34788 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:50:23.273539 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:50:23.273605 kernel: audit: type=1130 audit(1696276223.271:1189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.15:22-10.0.0.1:34788 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:50:23.306000 audit[2773]: USER_ACCT pid=2773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:23.307888 sshd[2773]: Accepted publickey for core from 10.0.0.1 port 34788 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:50:23.309407 sshd[2773]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:50:23.307000 audit[2773]: CRED_ACQ pid=2773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:23.314557 kernel: audit: type=1101 audit(1696276223.306:1190): pid=2773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:23.314626 kernel: audit: type=1103 audit(1696276223.307:1191): pid=2773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:23.314651 kernel: audit: type=1006 audit(1696276223.307:1192): pid=2773 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:50:23.313891 systemd-logind[1128]: New session 16 of user core. Oct 2 19:50:23.314262 systemd[1]: Started session-16.scope. Oct 2 19:50:23.307000 audit[2773]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc8e6e6b0 a2=3 a3=1 items=0 ppid=1 pid=2773 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:50:23.318599 kernel: audit: type=1300 audit(1696276223.307:1192): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc8e6e6b0 a2=3 a3=1 items=0 ppid=1 pid=2773 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:50:23.307000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:50:23.320383 kernel: audit: type=1327 audit(1696276223.307:1192): proctitle=737368643A20636F7265205B707269765D Oct 2 19:50:23.321053 kernel: audit: type=1105 audit(1696276223.317:1193): pid=2773 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:23.317000 audit[2773]: USER_START pid=2773 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:23.319000 audit[2775]: CRED_ACQ pid=2775 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:23.326069 kernel: audit: type=1103 audit(1696276223.319:1194): pid=2775 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:23.425995 sshd[2773]: pam_unix(sshd:session): session closed for user core Oct 2 19:50:23.425000 audit[2773]: USER_END pid=2773 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:23.428329 systemd[1]: sshd@15-10.0.0.15:22-10.0.0.1:34788.service: Deactivated successfully. Oct 2 19:50:23.429075 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:50:23.429743 systemd-logind[1128]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:50:23.425000 audit[2773]: CRED_DISP pid=2773 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:23.430521 systemd-logind[1128]: Removed session 16. Oct 2 19:50:23.433184 kernel: audit: type=1106 audit(1696276223.425:1195): pid=2773 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:23.433234 kernel: audit: type=1104 audit(1696276223.425:1196): pid=2773 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:23.427000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.15:22-10.0.0.1:34788 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:50:26.416710 kubelet[2038]: E1002 19:50:26.416074 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:50:26.416710 kubelet[2038]: E1002 19:50:26.416278 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73)\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:50:26.424199 kubelet[2038]: E1002 19:50:26.424166 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:50:28.858000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:50:28.864006 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:50:28.864094 kernel: audit: type=1400 audit(1696276228.858:1198): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:50:28.864113 kernel: audit: type=1400 audit(1696276228.859:1199): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:50:28.859000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:50:28.866847 kernel: audit: type=1300 audit(1696276228.859:1199): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4002ca21a0 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:50:28.859000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4002ca21a0 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:50:28.870651 kernel: audit: type=1327 audit(1696276228.859:1199): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:50:28.859000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:50:28.873624 kernel: audit: type=1400 audit(1696276228.859:1200): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:50:28.859000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:50:28.859000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4002ca23c0 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:50:28.879965 kernel: audit: type=1300 audit(1696276228.859:1200): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4002ca23c0 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:50:28.880034 kernel: audit: type=1327 audit(1696276228.859:1200): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:50:28.859000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:50:28.883116 kernel: audit: type=1400 audit(1696276228.859:1201): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:50:28.859000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:50:28.885817 kernel: audit: type=1300 audit(1696276228.859:1201): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4002ca23e0 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:50:28.859000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4002ca23e0 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:50:28.889666 kernel: audit: type=1327 audit(1696276228.859:1201): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:50:28.859000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:50:28.858000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40026660c0 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:50:28.858000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:50:31.425459 kubelet[2038]: E1002 19:50:31.425412 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:50:33.429000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.15:22-10.0.0.1:45690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:50:33.430950 systemd[1]: Started sshd@16-10.0.0.15:22-10.0.0.1:45690.service. Oct 2 19:50:33.468000 audit[2789]: USER_ACCT pid=2789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:33.470470 sshd[2789]: Accepted publickey for core from 10.0.0.1 port 45690 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:50:33.469000 audit[2789]: CRED_ACQ pid=2789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:33.469000 audit[2789]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc324630 a2=3 a3=1 items=0 ppid=1 pid=2789 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:50:33.469000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:50:33.471748 sshd[2789]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:50:33.477065 systemd-logind[1128]: New session 17 of user core. Oct 2 19:50:33.477139 systemd[1]: Started session-17.scope. Oct 2 19:50:33.483000 audit[2789]: USER_START pid=2789 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:33.484000 audit[2791]: CRED_ACQ pid=2791 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:33.606512 sshd[2789]: pam_unix(sshd:session): session closed for user core Oct 2 19:50:33.609000 audit[2789]: USER_END pid=2789 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:33.609000 audit[2789]: CRED_DISP pid=2789 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:33.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.15:22-10.0.0.1:45706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:50:33.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.15:22-10.0.0.1:45690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:50:33.612650 systemd[1]: Started sshd@17-10.0.0.15:22-10.0.0.1:45706.service. Oct 2 19:50:33.613166 systemd[1]: sshd@16-10.0.0.15:22-10.0.0.1:45690.service: Deactivated successfully. Oct 2 19:50:33.613924 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:50:33.614892 systemd-logind[1128]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:50:33.615816 systemd-logind[1128]: Removed session 17. Oct 2 19:50:33.647000 audit[2802]: USER_ACCT pid=2802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:33.649637 sshd[2802]: Accepted publickey for core from 10.0.0.1 port 45706 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:50:33.649000 audit[2802]: CRED_ACQ pid=2802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:33.649000 audit[2802]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0e7ff30 a2=3 a3=1 items=0 ppid=1 pid=2802 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:50:33.649000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:50:33.651296 sshd[2802]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:50:33.655794 systemd-logind[1128]: New session 18 of user core. Oct 2 19:50:33.656218 systemd[1]: Started session-18.scope. Oct 2 19:50:33.662000 audit[2802]: USER_START pid=2802 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:33.664000 audit[2805]: CRED_ACQ pid=2805 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:34.504269 sshd[2802]: pam_unix(sshd:session): session closed for user core Oct 2 19:50:34.504784 systemd[1]: Started sshd@18-10.0.0.15:22-10.0.0.1:45712.service. Oct 2 19:50:34.510696 kernel: kauditd_printk_skb: 21 callbacks suppressed Oct 2 19:50:34.510792 kernel: audit: type=1130 audit(1696276234.503:1217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.15:22-10.0.0.1:45712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:50:34.503000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.15:22-10.0.0.1:45712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:50:34.516000 audit[2802]: USER_END pid=2802 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:34.517000 audit[2802]: CRED_DISP pid=2802 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:34.521795 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:50:34.522906 systemd[1]: sshd@17-10.0.0.15:22-10.0.0.1:45706.service: Deactivated successfully. Oct 2 19:50:34.527483 kernel: audit: type=1106 audit(1696276234.516:1218): pid=2802 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:34.527558 kernel: audit: type=1104 audit(1696276234.517:1219): pid=2802 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:34.529797 systemd-logind[1128]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:50:34.521000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.15:22-10.0.0.1:45706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:50:34.536828 systemd-logind[1128]: Removed session 18. Oct 2 19:50:34.537462 kernel: audit: type=1131 audit(1696276234.521:1220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.15:22-10.0.0.1:45706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:50:34.550000 audit[2814]: USER_ACCT pid=2814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:34.552224 sshd[2814]: Accepted publickey for core from 10.0.0.1 port 45712 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:50:34.557413 sshd[2814]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:50:34.555000 audit[2814]: CRED_ACQ pid=2814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:34.560660 kernel: audit: type=1101 audit(1696276234.550:1221): pid=2814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:34.560752 kernel: audit: type=1103 audit(1696276234.555:1222): pid=2814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:34.562574 kernel: audit: type=1006 audit(1696276234.555:1223): pid=2814 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Oct 2 19:50:34.555000 audit[2814]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde0a1e90 a2=3 a3=1 items=0 ppid=1 pid=2814 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:50:34.565761 kernel: audit: type=1300 audit(1696276234.555:1223): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde0a1e90 a2=3 a3=1 items=0 ppid=1 pid=2814 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:50:34.555000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:50:34.567030 kernel: audit: type=1327 audit(1696276234.555:1223): proctitle=737368643A20636F7265205B707269765D Oct 2 19:50:34.568962 systemd-logind[1128]: New session 19 of user core. Oct 2 19:50:34.570076 systemd[1]: Started session-19.scope. Oct 2 19:50:34.573000 audit[2814]: USER_START pid=2814 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:34.579477 kernel: audit: type=1105 audit(1696276234.573:1224): pid=2814 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:34.578000 audit[2817]: CRED_ACQ pid=2817 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:34.708946 sshd[2814]: pam_unix(sshd:session): session closed for user core Oct 2 19:50:34.708000 audit[2814]: USER_END pid=2814 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:34.708000 audit[2814]: CRED_DISP pid=2814 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:34.711737 systemd[1]: sshd@18-10.0.0.15:22-10.0.0.1:45712.service: Deactivated successfully. Oct 2 19:50:34.710000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.15:22-10.0.0.1:45712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:50:34.712493 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:50:34.714741 systemd-logind[1128]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:50:34.716200 systemd-logind[1128]: Removed session 19. Oct 2 19:50:36.426371 kubelet[2038]: E1002 19:50:36.426345 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:50:37.415784 kubelet[2038]: E1002 19:50:37.415656 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:50:38.415891 kubelet[2038]: E1002 19:50:38.415854 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:50:38.416235 kubelet[2038]: E1002 19:50:38.416060 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73)\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:50:41.428617 kubelet[2038]: E1002 19:50:41.428542 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:50:44.717385 kernel: kauditd_printk_skb: 4 callbacks suppressed Oct 2 19:50:44.717505 kernel: audit: type=1130 audit(1696276244.712:1229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.15:22-10.0.0.1:51894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:50:44.712000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.15:22-10.0.0.1:51894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:50:44.713728 systemd[1]: Started sshd@19-10.0.0.15:22-10.0.0.1:51894.service. Oct 2 19:50:44.777000 audit[2828]: USER_ACCT pid=2828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:44.778603 sshd[2828]: Accepted publickey for core from 10.0.0.1 port 51894 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:50:44.786499 kernel: audit: type=1101 audit(1696276244.777:1230): pid=2828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:44.786000 audit[2828]: CRED_ACQ pid=2828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:44.786984 sshd[2828]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:50:44.795584 kernel: audit: type=1103 audit(1696276244.786:1231): pid=2828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:44.795643 kernel: audit: type=1006 audit(1696276244.786:1232): pid=2828 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:50:44.797356 kernel: audit: type=1300 audit(1696276244.786:1232): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe2f2db10 a2=3 a3=1 items=0 ppid=1 pid=2828 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:50:44.797530 kernel: audit: type=1327 audit(1696276244.786:1232): proctitle=737368643A20636F7265205B707269765D Oct 2 19:50:44.786000 audit[2828]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe2f2db10 a2=3 a3=1 items=0 ppid=1 pid=2828 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:50:44.786000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:50:44.796686 systemd[1]: Started session-20.scope. Oct 2 19:50:44.797002 systemd-logind[1128]: New session 20 of user core. Oct 2 19:50:44.808000 audit[2828]: USER_START pid=2828 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:44.811000 audit[2830]: CRED_ACQ pid=2830 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:44.814938 kernel: audit: type=1105 audit(1696276244.808:1233): pid=2828 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:44.815020 kernel: audit: type=1103 audit(1696276244.811:1234): pid=2830 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:44.940829 sshd[2828]: pam_unix(sshd:session): session closed for user core Oct 2 19:50:44.941000 audit[2828]: USER_END pid=2828 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:44.943584 systemd[1]: sshd@19-10.0.0.15:22-10.0.0.1:51894.service: Deactivated successfully. Oct 2 19:50:44.944500 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:50:44.941000 audit[2828]: CRED_DISP pid=2828 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:44.947337 systemd-logind[1128]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:50:44.948496 kernel: audit: type=1106 audit(1696276244.941:1235): pid=2828 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:44.948541 kernel: audit: type=1104 audit(1696276244.941:1236): pid=2828 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:44.941000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.15:22-10.0.0.1:51894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:50:44.951666 systemd-logind[1128]: Removed session 20. Oct 2 19:50:46.429131 kubelet[2038]: E1002 19:50:46.429091 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:50:50.415996 kubelet[2038]: E1002 19:50:50.415960 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:50:50.416344 kubelet[2038]: E1002 19:50:50.416201 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73)\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:50:51.415893 kubelet[2038]: E1002 19:50:51.415849 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:50:51.430254 kubelet[2038]: E1002 19:50:51.430223 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:50:54.942000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.15:22-10.0.0.1:38988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:50:54.943140 systemd[1]: Started sshd@20-10.0.0.15:22-10.0.0.1:38988.service. Oct 2 19:50:54.943976 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:50:54.944012 kernel: audit: type=1130 audit(1696276254.942:1238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.15:22-10.0.0.1:38988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:50:54.977000 audit[2841]: USER_ACCT pid=2841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:54.978206 sshd[2841]: Accepted publickey for core from 10.0.0.1 port 38988 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:50:54.979788 sshd[2841]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:50:54.979000 audit[2841]: CRED_ACQ pid=2841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:54.983605 systemd-logind[1128]: New session 21 of user core. Oct 2 19:50:54.984048 kernel: audit: type=1101 audit(1696276254.977:1239): pid=2841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:54.984104 kernel: audit: type=1103 audit(1696276254.979:1240): pid=2841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:54.984127 kernel: audit: type=1006 audit(1696276254.979:1241): pid=2841 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:50:54.984360 systemd[1]: Started session-21.scope. Oct 2 19:50:54.979000 audit[2841]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc194a80 a2=3 a3=1 items=0 ppid=1 pid=2841 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:50:54.988926 kernel: audit: type=1300 audit(1696276254.979:1241): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc194a80 a2=3 a3=1 items=0 ppid=1 pid=2841 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:50:54.989011 kernel: audit: type=1327 audit(1696276254.979:1241): proctitle=737368643A20636F7265205B707269765D Oct 2 19:50:54.979000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:50:54.987000 audit[2841]: USER_START pid=2841 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:54.993370 kernel: audit: type=1105 audit(1696276254.987:1242): pid=2841 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:54.993407 kernel: audit: type=1103 audit(1696276254.989:1243): pid=2843 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:54.989000 audit[2843]: CRED_ACQ pid=2843 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:55.095514 sshd[2841]: pam_unix(sshd:session): session closed for user core Oct 2 19:50:55.096000 audit[2841]: USER_END pid=2841 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:55.096000 audit[2841]: CRED_DISP pid=2841 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:55.100867 systemd[1]: sshd@20-10.0.0.15:22-10.0.0.1:38988.service: Deactivated successfully. Oct 2 19:50:55.101635 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:50:55.102200 systemd-logind[1128]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:50:55.102857 systemd-logind[1128]: Removed session 21. Oct 2 19:50:55.103887 kernel: audit: type=1106 audit(1696276255.096:1244): pid=2841 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:55.104262 kernel: audit: type=1104 audit(1696276255.096:1245): pid=2841 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:50:55.100000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.15:22-10.0.0.1:38988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:50:56.431677 kubelet[2038]: E1002 19:50:56.431644 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:51:01.416707 kubelet[2038]: E1002 19:51:01.416371 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:51:01.416707 kubelet[2038]: E1002 19:51:01.416590 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73)\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:51:01.432706 kubelet[2038]: E1002 19:51:01.432673 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:51:05.102272 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:51:05.102361 kernel: audit: type=1130 audit(1696276265.100:1247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.15:22-10.0.0.1:59442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:05.100000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.15:22-10.0.0.1:59442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:05.100809 systemd[1]: Started sshd@21-10.0.0.15:22-10.0.0.1:59442.service. Oct 2 19:51:05.137000 audit[2856]: USER_ACCT pid=2856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:05.139549 sshd[2856]: Accepted publickey for core from 10.0.0.1 port 59442 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:51:05.140835 sshd[2856]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:51:05.139000 audit[2856]: CRED_ACQ pid=2856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:05.144129 kernel: audit: type=1101 audit(1696276265.137:1248): pid=2856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:05.144255 kernel: audit: type=1103 audit(1696276265.139:1249): pid=2856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:05.144282 kernel: audit: type=1006 audit(1696276265.139:1250): pid=2856 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 19:51:05.145515 kernel: audit: type=1300 audit(1696276265.139:1250): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6fa5320 a2=3 a3=1 items=0 ppid=1 pid=2856 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:51:05.139000 audit[2856]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6fa5320 a2=3 a3=1 items=0 ppid=1 pid=2856 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:51:05.148620 kernel: audit: type=1327 audit(1696276265.139:1250): proctitle=737368643A20636F7265205B707269765D Oct 2 19:51:05.139000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:51:05.148882 systemd-logind[1128]: New session 22 of user core. Oct 2 19:51:05.149850 systemd[1]: Started session-22.scope. Oct 2 19:51:05.158000 audit[2856]: USER_START pid=2856 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:05.159000 audit[2858]: CRED_ACQ pid=2858 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:05.164819 kernel: audit: type=1105 audit(1696276265.158:1251): pid=2856 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:05.164978 kernel: audit: type=1103 audit(1696276265.159:1252): pid=2858 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:05.270356 sshd[2856]: pam_unix(sshd:session): session closed for user core Oct 2 19:51:05.271000 audit[2856]: USER_END pid=2856 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:05.273398 systemd[1]: sshd@21-10.0.0.15:22-10.0.0.1:59442.service: Deactivated successfully. Oct 2 19:51:05.274157 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:51:05.275115 systemd-logind[1128]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:51:05.271000 audit[2856]: CRED_DISP pid=2856 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:05.276641 systemd-logind[1128]: Removed session 22. Oct 2 19:51:05.279349 kernel: audit: type=1106 audit(1696276265.271:1253): pid=2856 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:05.279416 kernel: audit: type=1104 audit(1696276265.271:1254): pid=2856 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:05.272000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.15:22-10.0.0.1:59442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:05.416211 kubelet[2038]: E1002 19:51:05.415599 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:51:06.434199 kubelet[2038]: E1002 19:51:06.434169 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:51:09.416275 kubelet[2038]: E1002 19:51:09.416242 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:51:11.435566 kubelet[2038]: E1002 19:51:11.435539 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:51:11.866000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:51:11.867712 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:51:11.867764 kernel: audit: type=1400 audit(1696276271.866:1256): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:51:11.866000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40013f18f0 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:51:11.874408 kernel: audit: type=1300 audit(1696276271.866:1256): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40013f18f0 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:51:11.874471 kernel: audit: type=1327 audit(1696276271.866:1256): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:51:11.866000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:51:11.868000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:51:11.880456 kernel: audit: type=1400 audit(1696276271.868:1257): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:51:11.880510 kernel: audit: type=1300 audit(1696276271.868:1257): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002925940 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:51:11.868000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002925940 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:51:11.868000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:51:11.887379 kernel: audit: type=1327 audit(1696276271.868:1257): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:51:12.415689 kubelet[2038]: E1002 19:51:12.415666 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:51:12.415894 kubelet[2038]: E1002 19:51:12.415878 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73)\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:51:13.089000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:51:13.089000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:51:13.096167 kernel: audit: type=1400 audit(1696276273.089:1258): avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:51:13.096235 kernel: audit: type=1400 audit(1696276273.089:1259): avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:51:13.096258 kernel: audit: type=1300 audit(1696276273.089:1259): arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=4002bb4880 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:51:13.089000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=4002bb4880 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:51:13.089000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:51:13.103165 kernel: audit: type=1327 audit(1696276273.089:1259): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:51:13.089000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4009e70d20 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:51:13.089000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:51:13.090000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7043 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:51:13.090000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4009ddfb00 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:51:13.090000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:51:13.090000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7051 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:51:13.090000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4009cb87b0 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:51:13.090000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:51:13.092000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:51:13.092000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4009e70f30 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:51:13.092000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:51:13.092000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:51:13.092000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4002bbf1c0 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:51:13.092000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:51:15.272000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.15:22-10.0.0.1:38096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:15.273757 systemd[1]: Started sshd@22-10.0.0.15:22-10.0.0.1:38096.service. Oct 2 19:51:15.316000 audit[2870]: USER_ACCT pid=2870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:15.317817 sshd[2870]: Accepted publickey for core from 10.0.0.1 port 38096 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:51:15.317000 audit[2870]: CRED_ACQ pid=2870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:15.317000 audit[2870]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1d12cb0 a2=3 a3=1 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:51:15.317000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:51:15.319130 sshd[2870]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:51:15.323202 systemd-logind[1128]: New session 23 of user core. Oct 2 19:51:15.323608 systemd[1]: Started session-23.scope. Oct 2 19:51:15.327000 audit[2870]: USER_START pid=2870 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:15.328000 audit[2872]: CRED_ACQ pid=2872 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:15.442085 sshd[2870]: pam_unix(sshd:session): session closed for user core Oct 2 19:51:15.441000 audit[2870]: USER_END pid=2870 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:15.441000 audit[2870]: CRED_DISP pid=2870 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:15.444798 systemd[1]: sshd@22-10.0.0.15:22-10.0.0.1:38096.service: Deactivated successfully. Oct 2 19:51:15.443000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.15:22-10.0.0.1:38096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:15.445499 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:51:15.446181 systemd-logind[1128]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:51:15.447037 systemd-logind[1128]: Removed session 23. Oct 2 19:51:16.436883 kubelet[2038]: E1002 19:51:16.436844 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:51:21.438088 kubelet[2038]: E1002 19:51:21.438057 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:51:23.415376 kubelet[2038]: E1002 19:51:23.415336 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:51:23.415735 kubelet[2038]: E1002 19:51:23.415593 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73)\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:51:25.446918 systemd[1]: Started sshd@23-10.0.0.15:22-10.0.0.1:38346.service. Oct 2 19:51:25.445000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.15:22-10.0.0.1:38346 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:25.448066 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:51:25.448128 kernel: audit: type=1130 audit(1696276285.445:1273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.15:22-10.0.0.1:38346 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:25.480000 audit[2885]: USER_ACCT pid=2885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:25.482529 sshd[2885]: Accepted publickey for core from 10.0.0.1 port 38346 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:51:25.483629 sshd[2885]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:51:25.481000 audit[2885]: CRED_ACQ pid=2885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:25.488288 kernel: audit: type=1101 audit(1696276285.480:1274): pid=2885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:25.488373 kernel: audit: type=1103 audit(1696276285.481:1275): pid=2885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:25.490220 kernel: audit: type=1006 audit(1696276285.481:1276): pid=2885 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:51:25.490457 kernel: audit: type=1300 audit(1696276285.481:1276): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0d39f60 a2=3 a3=1 items=0 ppid=1 pid=2885 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:51:25.481000 audit[2885]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0d39f60 a2=3 a3=1 items=0 ppid=1 pid=2885 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:51:25.481000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:51:25.494927 kernel: audit: type=1327 audit(1696276285.481:1276): proctitle=737368643A20636F7265205B707269765D Oct 2 19:51:25.496954 systemd-logind[1128]: New session 24 of user core. Oct 2 19:51:25.497832 systemd[1]: Started session-24.scope. Oct 2 19:51:25.499000 audit[2885]: USER_START pid=2885 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:25.503000 audit[2887]: CRED_ACQ pid=2887 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:25.507871 kernel: audit: type=1105 audit(1696276285.499:1277): pid=2885 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:25.507919 kernel: audit: type=1103 audit(1696276285.503:1278): pid=2887 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:25.612564 sshd[2885]: pam_unix(sshd:session): session closed for user core Oct 2 19:51:25.612000 audit[2885]: USER_END pid=2885 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:25.615336 systemd[1]: sshd@23-10.0.0.15:22-10.0.0.1:38346.service: Deactivated successfully. Oct 2 19:51:25.616065 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:51:25.612000 audit[2885]: CRED_DISP pid=2885 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:25.617982 systemd-logind[1128]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:51:25.618684 systemd-logind[1128]: Removed session 24. Oct 2 19:51:25.619729 kernel: audit: type=1106 audit(1696276285.612:1279): pid=2885 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:25.619787 kernel: audit: type=1104 audit(1696276285.612:1280): pid=2885 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:25.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.15:22-10.0.0.1:38346 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:26.439555 kubelet[2038]: E1002 19:51:26.439517 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:51:28.860000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:51:28.860000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:51:28.860000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400105efc0 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:51:28.860000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40013e0f40 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:51:28.860000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:51:28.860000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:51:28.860000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:51:28.860000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40013e0f60 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:51:28.860000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:51:28.861000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:51:28.861000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40013e1180 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:51:28.861000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:51:31.416393 kubelet[2038]: E1002 19:51:31.416357 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:51:31.440928 kubelet[2038]: E1002 19:51:31.440902 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:51:35.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.15:22-10.0.0.1:49688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.619678 systemd[1]: Started sshd@24-10.0.0.15:22-10.0.0.1:49688.service. Oct 2 19:51:35.620616 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:51:35.620676 kernel: audit: type=1130 audit(1696276295.618:1286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.15:22-10.0.0.1:49688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.660000 audit[2900]: USER_ACCT pid=2900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:35.662017 sshd[2900]: Accepted publickey for core from 10.0.0.1 port 49688 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:51:35.662984 sshd[2900]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:51:35.661000 audit[2900]: CRED_ACQ pid=2900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:35.667881 kernel: audit: type=1101 audit(1696276295.660:1287): pid=2900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:35.667949 kernel: audit: type=1103 audit(1696276295.661:1288): pid=2900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:35.670022 kernel: audit: type=1006 audit(1696276295.661:1289): pid=2900 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:51:35.670090 kernel: audit: type=1300 audit(1696276295.661:1289): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec9ad600 a2=3 a3=1 items=0 ppid=1 pid=2900 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:51:35.661000 audit[2900]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec9ad600 a2=3 a3=1 items=0 ppid=1 pid=2900 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:51:35.671811 systemd-logind[1128]: New session 25 of user core. Oct 2 19:51:35.671872 systemd[1]: Started session-25.scope. Oct 2 19:51:35.661000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:51:35.674180 kernel: audit: type=1327 audit(1696276295.661:1289): proctitle=737368643A20636F7265205B707269765D Oct 2 19:51:35.674000 audit[2900]: USER_START pid=2900 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:35.679469 kernel: audit: type=1105 audit(1696276295.674:1290): pid=2900 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:35.678000 audit[2902]: CRED_ACQ pid=2902 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:35.682456 kernel: audit: type=1103 audit(1696276295.678:1291): pid=2902 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:35.786710 sshd[2900]: pam_unix(sshd:session): session closed for user core Oct 2 19:51:35.786000 audit[2900]: USER_END pid=2900 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:35.789012 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:51:35.789589 systemd[1]: sshd@24-10.0.0.15:22-10.0.0.1:49688.service: Deactivated successfully. Oct 2 19:51:35.786000 audit[2900]: CRED_DISP pid=2900 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:35.794382 kernel: audit: type=1106 audit(1696276295.786:1292): pid=2900 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:35.794449 kernel: audit: type=1104 audit(1696276295.786:1293): pid=2900 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:35.788000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.15:22-10.0.0.1:49688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.794519 systemd-logind[1128]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:51:35.795098 systemd-logind[1128]: Removed session 25. Oct 2 19:51:36.442089 kubelet[2038]: E1002 19:51:36.442063 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:51:38.415550 kubelet[2038]: E1002 19:51:38.415517 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:51:38.418544 env[1142]: time="2023-10-02T19:51:38.418502429Z" level=info msg="CreateContainer within sandbox \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:51:38.426806 env[1142]: time="2023-10-02T19:51:38.426767243Z" level=info msg="CreateContainer within sandbox \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"d5e93018f0e233a375b79130e4b8ba129be566f487dfa847a7b74bf706adb8c9\"" Oct 2 19:51:38.427191 env[1142]: time="2023-10-02T19:51:38.427165840Z" level=info msg="StartContainer for \"d5e93018f0e233a375b79130e4b8ba129be566f487dfa847a7b74bf706adb8c9\"" Oct 2 19:51:38.443112 systemd[1]: run-containerd-runc-k8s.io-d5e93018f0e233a375b79130e4b8ba129be566f487dfa847a7b74bf706adb8c9-runc.AyygnV.mount: Deactivated successfully. Oct 2 19:51:38.444333 systemd[1]: Started cri-containerd-d5e93018f0e233a375b79130e4b8ba129be566f487dfa847a7b74bf706adb8c9.scope. Oct 2 19:51:38.478209 systemd[1]: cri-containerd-d5e93018f0e233a375b79130e4b8ba129be566f487dfa847a7b74bf706adb8c9.scope: Deactivated successfully. Oct 2 19:51:38.500765 env[1142]: time="2023-10-02T19:51:38.500710612Z" level=info msg="shim disconnected" id=d5e93018f0e233a375b79130e4b8ba129be566f487dfa847a7b74bf706adb8c9 Oct 2 19:51:38.500765 env[1142]: time="2023-10-02T19:51:38.500763132Z" level=warning msg="cleaning up after shim disconnected" id=d5e93018f0e233a375b79130e4b8ba129be566f487dfa847a7b74bf706adb8c9 namespace=k8s.io Oct 2 19:51:38.500765 env[1142]: time="2023-10-02T19:51:38.500773412Z" level=info msg="cleaning up dead shim" Oct 2 19:51:38.509492 env[1142]: time="2023-10-02T19:51:38.509413703Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:51:38Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2936 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:51:38Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d5e93018f0e233a375b79130e4b8ba129be566f487dfa847a7b74bf706adb8c9/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:51:38.509742 env[1142]: time="2023-10-02T19:51:38.509675580Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 19:51:38.509955 env[1142]: time="2023-10-02T19:51:38.509905899Z" level=error msg="Failed to pipe stderr of container \"d5e93018f0e233a375b79130e4b8ba129be566f487dfa847a7b74bf706adb8c9\"" error="reading from a closed fifo" Oct 2 19:51:38.513300 env[1142]: time="2023-10-02T19:51:38.510521334Z" level=error msg="Failed to pipe stdout of container \"d5e93018f0e233a375b79130e4b8ba129be566f487dfa847a7b74bf706adb8c9\"" error="reading from a closed fifo" Oct 2 19:51:38.520566 env[1142]: time="2023-10-02T19:51:38.520523534Z" level=error msg="StartContainer for \"d5e93018f0e233a375b79130e4b8ba129be566f487dfa847a7b74bf706adb8c9\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:51:38.521005 kubelet[2038]: E1002 19:51:38.520845 2038 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d5e93018f0e233a375b79130e4b8ba129be566f487dfa847a7b74bf706adb8c9" Oct 2 19:51:38.521005 kubelet[2038]: E1002 19:51:38.520948 2038 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:51:38.521005 kubelet[2038]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:51:38.521005 kubelet[2038]: rm /hostbin/cilium-mount Oct 2 19:51:38.521192 kubelet[2038]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-b82d2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:51:38.521250 kubelet[2038]: E1002 19:51:38.520983 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:51:38.742805 kubelet[2038]: I1002 19:51:38.742408 2038 scope.go:115] "RemoveContainer" containerID="b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84" Oct 2 19:51:38.742805 kubelet[2038]: I1002 19:51:38.742703 2038 scope.go:115] "RemoveContainer" containerID="b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84" Oct 2 19:51:38.745234 env[1142]: time="2023-10-02T19:51:38.745194459Z" level=info msg="RemoveContainer for \"b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84\"" Oct 2 19:51:38.745971 env[1142]: time="2023-10-02T19:51:38.745938093Z" level=info msg="RemoveContainer for \"b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84\"" Oct 2 19:51:38.746266 env[1142]: time="2023-10-02T19:51:38.746225771Z" level=error msg="RemoveContainer for \"b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84\" failed" error="failed to set removing state for container \"b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84\": container is already in removing state" Oct 2 19:51:38.746594 kubelet[2038]: E1002 19:51:38.746571 2038 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84\": container is already in removing state" containerID="b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84" Oct 2 19:51:38.746701 kubelet[2038]: E1002 19:51:38.746605 2038 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84": container is already in removing state; Skipping pod "cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73)" Oct 2 19:51:38.746701 kubelet[2038]: E1002 19:51:38.746662 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:51:38.746923 kubelet[2038]: E1002 19:51:38.746867 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73)\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:51:38.748420 env[1142]: time="2023-10-02T19:51:38.748391234Z" level=info msg="RemoveContainer for \"b99d23823d60628762bda806982da3457f186ef5de25121b3613d7db7ed1fa84\" returns successfully" Oct 2 19:51:39.424788 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d5e93018f0e233a375b79130e4b8ba129be566f487dfa847a7b74bf706adb8c9-rootfs.mount: Deactivated successfully. Oct 2 19:51:41.443771 kubelet[2038]: E1002 19:51:41.443732 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:51:41.604769 kubelet[2038]: W1002 19:51:41.604719 2038 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod42acbbb9_ea23_4993_91c6_a2517c4fca73.slice/cri-containerd-d5e93018f0e233a375b79130e4b8ba129be566f487dfa847a7b74bf706adb8c9.scope WatchSource:0}: task d5e93018f0e233a375b79130e4b8ba129be566f487dfa847a7b74bf706adb8c9 not found: not found Oct 2 19:51:45.789000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.15:22-10.0.0.1:39298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:45.791020 systemd[1]: Started sshd@25-10.0.0.15:22-10.0.0.1:39298.service. Oct 2 19:51:45.791839 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:51:45.791899 kernel: audit: type=1130 audit(1696276305.789:1295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.15:22-10.0.0.1:39298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:45.824000 audit[2950]: USER_ACCT pid=2950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:45.826511 sshd[2950]: Accepted publickey for core from 10.0.0.1 port 39298 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:51:45.827496 sshd[2950]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:51:45.825000 audit[2950]: CRED_ACQ pid=2950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:45.832160 kernel: audit: type=1101 audit(1696276305.824:1296): pid=2950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:45.832264 kernel: audit: type=1103 audit(1696276305.825:1297): pid=2950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:45.832313 kernel: audit: type=1006 audit(1696276305.825:1298): pid=2950 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:51:45.825000 audit[2950]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeedcef40 a2=3 a3=1 items=0 ppid=1 pid=2950 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:51:45.834501 systemd-logind[1128]: New session 26 of user core. Oct 2 19:51:45.835300 systemd[1]: Started session-26.scope. Oct 2 19:51:45.836976 kernel: audit: type=1300 audit(1696276305.825:1298): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeedcef40 a2=3 a3=1 items=0 ppid=1 pid=2950 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:51:45.837054 kernel: audit: type=1327 audit(1696276305.825:1298): proctitle=737368643A20636F7265205B707269765D Oct 2 19:51:45.825000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:51:45.837000 audit[2950]: USER_START pid=2950 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:45.842457 kernel: audit: type=1105 audit(1696276305.837:1299): pid=2950 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:45.841000 audit[2952]: CRED_ACQ pid=2952 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:45.846474 kernel: audit: type=1103 audit(1696276305.841:1300): pid=2952 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:45.955945 sshd[2950]: pam_unix(sshd:session): session closed for user core Oct 2 19:51:45.955000 audit[2950]: USER_END pid=2950 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:45.960584 systemd[1]: sshd@25-10.0.0.15:22-10.0.0.1:39298.service: Deactivated successfully. Oct 2 19:51:45.955000 audit[2950]: CRED_DISP pid=2950 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:45.961333 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:51:45.963639 kernel: audit: type=1106 audit(1696276305.955:1301): pid=2950 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:45.963704 kernel: audit: type=1104 audit(1696276305.955:1302): pid=2950 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:45.959000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.15:22-10.0.0.1:39298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:45.964201 systemd-logind[1128]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:51:45.964904 systemd-logind[1128]: Removed session 26. Oct 2 19:51:46.444707 kubelet[2038]: E1002 19:51:46.444657 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:51:51.446274 kubelet[2038]: E1002 19:51:51.446245 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:51:52.415584 kubelet[2038]: E1002 19:51:52.415552 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:51:52.415948 kubelet[2038]: E1002 19:51:52.415931 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73)\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:51:55.960763 systemd[1]: Started sshd@26-10.0.0.15:22-10.0.0.1:49714.service. Oct 2 19:51:55.959000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.15:22-10.0.0.1:49714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:55.961729 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:51:55.961777 kernel: audit: type=1130 audit(1696276315.959:1304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.15:22-10.0.0.1:49714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:55.994000 audit[2963]: USER_ACCT pid=2963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:55.996179 sshd[2963]: Accepted publickey for core from 10.0.0.1 port 49714 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:51:55.997342 sshd[2963]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:51:55.995000 audit[2963]: CRED_ACQ pid=2963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:56.002243 kernel: audit: type=1101 audit(1696276315.994:1305): pid=2963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:56.002346 kernel: audit: type=1103 audit(1696276315.995:1306): pid=2963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:56.004487 kernel: audit: type=1006 audit(1696276315.995:1307): pid=2963 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:51:56.004559 kernel: audit: type=1300 audit(1696276315.995:1307): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeec9dc30 a2=3 a3=1 items=0 ppid=1 pid=2963 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:51:55.995000 audit[2963]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeec9dc30 a2=3 a3=1 items=0 ppid=1 pid=2963 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:51:56.005735 systemd-logind[1128]: New session 27 of user core. Oct 2 19:51:56.006195 systemd[1]: Started session-27.scope. Oct 2 19:51:56.007655 kernel: audit: type=1327 audit(1696276315.995:1307): proctitle=737368643A20636F7265205B707269765D Oct 2 19:51:55.995000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:51:56.008000 audit[2963]: USER_START pid=2963 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:56.012000 audit[2965]: CRED_ACQ pid=2965 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:56.016685 kernel: audit: type=1105 audit(1696276316.008:1308): pid=2963 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:56.016774 kernel: audit: type=1103 audit(1696276316.012:1309): pid=2965 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:56.120841 sshd[2963]: pam_unix(sshd:session): session closed for user core Oct 2 19:51:56.120000 audit[2963]: USER_END pid=2963 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:56.123182 systemd[1]: sshd@26-10.0.0.15:22-10.0.0.1:49714.service: Deactivated successfully. Oct 2 19:51:56.123897 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:51:56.124415 systemd-logind[1128]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:51:56.125190 systemd-logind[1128]: Removed session 27. Oct 2 19:51:56.120000 audit[2963]: CRED_DISP pid=2963 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:56.128161 kernel: audit: type=1106 audit(1696276316.120:1310): pid=2963 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:56.128235 kernel: audit: type=1104 audit(1696276316.120:1311): pid=2963 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:51:56.121000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.15:22-10.0.0.1:49714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:56.446851 kubelet[2038]: E1002 19:51:56.446819 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:52:00.416059 kubelet[2038]: E1002 19:52:00.416022 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:52:01.447475 kubelet[2038]: E1002 19:52:01.447396 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:52:06.124000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.15:22-10.0.0.1:54750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:06.126138 systemd[1]: Started sshd@27-10.0.0.15:22-10.0.0.1:54750.service. Oct 2 19:52:06.126997 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:52:06.127050 kernel: audit: type=1130 audit(1696276326.124:1313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.15:22-10.0.0.1:54750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:06.162000 audit[2978]: USER_ACCT pid=2978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:52:06.165073 sshd[2978]: Accepted publickey for core from 10.0.0.1 port 54750 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:52:06.165000 audit[2978]: CRED_ACQ pid=2978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:52:06.167016 sshd[2978]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:52:06.169617 kernel: audit: type=1101 audit(1696276326.162:1314): pid=2978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:52:06.169686 kernel: audit: type=1103 audit(1696276326.165:1315): pid=2978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:52:06.171635 kernel: audit: type=1006 audit(1696276326.165:1316): pid=2978 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:52:06.165000 audit[2978]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2f5a670 a2=3 a3=1 items=0 ppid=1 pid=2978 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:06.175258 kernel: audit: type=1300 audit(1696276326.165:1316): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2f5a670 a2=3 a3=1 items=0 ppid=1 pid=2978 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:06.175322 kernel: audit: type=1327 audit(1696276326.165:1316): proctitle=737368643A20636F7265205B707269765D Oct 2 19:52:06.165000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:52:06.179014 systemd-logind[1128]: New session 28 of user core. Oct 2 19:52:06.179067 systemd[1]: Started session-28.scope. Oct 2 19:52:06.185000 audit[2978]: USER_START pid=2978 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:52:06.190849 kernel: audit: type=1105 audit(1696276326.185:1317): pid=2978 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:52:06.188000 audit[2980]: CRED_ACQ pid=2980 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:52:06.196622 kernel: audit: type=1103 audit(1696276326.188:1318): pid=2980 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:52:06.302210 sshd[2978]: pam_unix(sshd:session): session closed for user core Oct 2 19:52:06.302000 audit[2978]: USER_END pid=2978 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:52:06.306942 systemd[1]: Started sshd@28-10.0.0.15:22-10.0.0.1:54758.service. Oct 2 19:52:06.308836 kernel: audit: type=1106 audit(1696276326.302:1319): pid=2978 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:52:06.308921 kernel: audit: type=1104 audit(1696276326.302:1320): pid=2978 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:52:06.302000 audit[2978]: CRED_DISP pid=2978 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:52:06.307419 systemd[1]: sshd@27-10.0.0.15:22-10.0.0.1:54750.service: Deactivated successfully. Oct 2 19:52:06.308249 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:52:06.309522 systemd-logind[1128]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:52:06.306000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.15:22-10.0.0.1:54758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:06.306000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.15:22-10.0.0.1:54750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:06.310316 systemd-logind[1128]: Removed session 28. Oct 2 19:52:06.342000 audit[2992]: USER_ACCT pid=2992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:52:06.344917 sshd[2992]: Accepted publickey for core from 10.0.0.1 port 54758 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:52:06.343000 audit[2992]: CRED_ACQ pid=2992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:52:06.343000 audit[2992]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff17a9d10 a2=3 a3=1 items=0 ppid=1 pid=2992 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:06.343000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:52:06.345268 sshd[2992]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:52:06.352097 systemd-logind[1128]: New session 29 of user core. Oct 2 19:52:06.352423 systemd[1]: Started session-29.scope. Oct 2 19:52:06.357000 audit[2992]: USER_START pid=2992 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:52:06.359000 audit[2995]: CRED_ACQ pid=2995 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:52:06.448577 kubelet[2038]: E1002 19:52:06.448436 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:52:07.416215 kubelet[2038]: E1002 19:52:07.416185 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:52:07.416633 kubelet[2038]: E1002 19:52:07.416614 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-5zd68_kube-system(42acbbb9-ea23-4993-91c6-a2517c4fca73)\"" pod="kube-system/cilium-5zd68" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 Oct 2 19:52:07.416735 kubelet[2038]: E1002 19:52:07.416678 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:52:08.870034 env[1142]: time="2023-10-02T19:52:08.869722066Z" level=info msg="StopPodSandbox for \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\"" Oct 2 19:52:08.870034 env[1142]: time="2023-10-02T19:52:08.869802786Z" level=info msg="Container to stop \"d5e93018f0e233a375b79130e4b8ba129be566f487dfa847a7b74bf706adb8c9\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:52:08.871271 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045-shm.mount: Deactivated successfully. Oct 2 19:52:08.883573 env[1142]: time="2023-10-02T19:52:08.883400947Z" level=info msg="StopContainer for \"e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9\" with timeout 30 (s)" Oct 2 19:52:08.883872 systemd[1]: cri-containerd-be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045.scope: Deactivated successfully. Oct 2 19:52:08.885071 env[1142]: time="2023-10-02T19:52:08.884956827Z" level=info msg="Stop container \"e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9\" with signal terminated" Oct 2 19:52:08.882000 audit: BPF prog-id=116 op=UNLOAD Oct 2 19:52:08.888000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:52:08.905064 systemd[1]: cri-containerd-e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9.scope: Deactivated successfully. Oct 2 19:52:08.903000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:52:08.912013 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045-rootfs.mount: Deactivated successfully. Oct 2 19:52:08.911000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:52:08.921688 env[1142]: time="2023-10-02T19:52:08.921635507Z" level=info msg="shim disconnected" id=be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045 Oct 2 19:52:08.921688 env[1142]: time="2023-10-02T19:52:08.921680787Z" level=warning msg="cleaning up after shim disconnected" id=be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045 namespace=k8s.io Oct 2 19:52:08.921688 env[1142]: time="2023-10-02T19:52:08.921690387Z" level=info msg="cleaning up dead shim" Oct 2 19:52:08.925986 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9-rootfs.mount: Deactivated successfully. Oct 2 19:52:08.929694 env[1142]: time="2023-10-02T19:52:08.929652028Z" level=info msg="shim disconnected" id=e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9 Oct 2 19:52:08.929694 env[1142]: time="2023-10-02T19:52:08.929695228Z" level=warning msg="cleaning up after shim disconnected" id=e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9 namespace=k8s.io Oct 2 19:52:08.929888 env[1142]: time="2023-10-02T19:52:08.929704068Z" level=info msg="cleaning up dead shim" Oct 2 19:52:08.931641 env[1142]: time="2023-10-02T19:52:08.931609828Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:52:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3038 runtime=io.containerd.runc.v2\n" Oct 2 19:52:08.931918 env[1142]: time="2023-10-02T19:52:08.931891108Z" level=info msg="TearDown network for sandbox \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\" successfully" Oct 2 19:52:08.931966 env[1142]: time="2023-10-02T19:52:08.931913828Z" level=info msg="StopPodSandbox for \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\" returns successfully" Oct 2 19:52:08.939835 env[1142]: time="2023-10-02T19:52:08.939800228Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:52:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3052 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:52:08Z\" level=warning msg=\"failed to remove runc container\" error=\"runc did not terminate successfully: exit status 255: \" runtime=io.containerd.runc.v2\n" Oct 2 19:52:08.943447 env[1142]: time="2023-10-02T19:52:08.943401828Z" level=info msg="StopContainer for \"e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9\" returns successfully" Oct 2 19:52:08.943807 env[1142]: time="2023-10-02T19:52:08.943776628Z" level=info msg="StopPodSandbox for \"acaefea9892b02227a43637751dcd2d3176e9bd6a3d0f87d5910b7f65fb15cd3\"" Oct 2 19:52:08.943956 env[1142]: time="2023-10-02T19:52:08.943931708Z" level=info msg="Container to stop \"e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:52:08.945200 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-acaefea9892b02227a43637751dcd2d3176e9bd6a3d0f87d5910b7f65fb15cd3-shm.mount: Deactivated successfully. Oct 2 19:52:08.952662 systemd[1]: cri-containerd-acaefea9892b02227a43637751dcd2d3176e9bd6a3d0f87d5910b7f65fb15cd3.scope: Deactivated successfully. Oct 2 19:52:08.951000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:52:08.955000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:52:08.973335 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-acaefea9892b02227a43637751dcd2d3176e9bd6a3d0f87d5910b7f65fb15cd3-rootfs.mount: Deactivated successfully. Oct 2 19:52:08.983296 env[1142]: time="2023-10-02T19:52:08.983251109Z" level=info msg="shim disconnected" id=acaefea9892b02227a43637751dcd2d3176e9bd6a3d0f87d5910b7f65fb15cd3 Oct 2 19:52:08.983296 env[1142]: time="2023-10-02T19:52:08.983297829Z" level=warning msg="cleaning up after shim disconnected" id=acaefea9892b02227a43637751dcd2d3176e9bd6a3d0f87d5910b7f65fb15cd3 namespace=k8s.io Oct 2 19:52:08.983518 env[1142]: time="2023-10-02T19:52:08.983308909Z" level=info msg="cleaning up dead shim" Oct 2 19:52:08.992290 env[1142]: time="2023-10-02T19:52:08.992250389Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:52:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3084 runtime=io.containerd.runc.v2\n" Oct 2 19:52:08.992592 env[1142]: time="2023-10-02T19:52:08.992567149Z" level=info msg="TearDown network for sandbox \"acaefea9892b02227a43637751dcd2d3176e9bd6a3d0f87d5910b7f65fb15cd3\" successfully" Oct 2 19:52:08.992655 env[1142]: time="2023-10-02T19:52:08.992591949Z" level=info msg="StopPodSandbox for \"acaefea9892b02227a43637751dcd2d3176e9bd6a3d0f87d5910b7f65fb15cd3\" returns successfully" Oct 2 19:52:09.117093 kubelet[2038]: I1002 19:52:09.117037 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-host-proc-sys-kernel\") pod \"42acbbb9-ea23-4993-91c6-a2517c4fca73\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " Oct 2 19:52:09.117093 kubelet[2038]: I1002 19:52:09.117086 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/42acbbb9-ea23-4993-91c6-a2517c4fca73-cilium-config-path\") pod \"42acbbb9-ea23-4993-91c6-a2517c4fca73\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " Oct 2 19:52:09.117518 kubelet[2038]: I1002 19:52:09.117105 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-etc-cni-netd\") pod \"42acbbb9-ea23-4993-91c6-a2517c4fca73\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " Oct 2 19:52:09.117518 kubelet[2038]: I1002 19:52:09.117152 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/42acbbb9-ea23-4993-91c6-a2517c4fca73-hubble-tls\") pod \"42acbbb9-ea23-4993-91c6-a2517c4fca73\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " Oct 2 19:52:09.117518 kubelet[2038]: I1002 19:52:09.117171 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-cni-path\") pod \"42acbbb9-ea23-4993-91c6-a2517c4fca73\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " Oct 2 19:52:09.117518 kubelet[2038]: I1002 19:52:09.117190 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e71044a0-6967-4cdb-9dad-3dd0cf96b265-cilium-config-path\") pod \"e71044a0-6967-4cdb-9dad-3dd0cf96b265\" (UID: \"e71044a0-6967-4cdb-9dad-3dd0cf96b265\") " Oct 2 19:52:09.117518 kubelet[2038]: I1002 19:52:09.117208 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-xtables-lock\") pod \"42acbbb9-ea23-4993-91c6-a2517c4fca73\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " Oct 2 19:52:09.117518 kubelet[2038]: I1002 19:52:09.117224 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-host-proc-sys-net\") pod \"42acbbb9-ea23-4993-91c6-a2517c4fca73\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " Oct 2 19:52:09.117658 kubelet[2038]: I1002 19:52:09.117245 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-b82d2\" (UniqueName: \"kubernetes.io/projected/42acbbb9-ea23-4993-91c6-a2517c4fca73-kube-api-access-b82d2\") pod \"42acbbb9-ea23-4993-91c6-a2517c4fca73\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " Oct 2 19:52:09.117658 kubelet[2038]: I1002 19:52:09.117308 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "42acbbb9-ea23-4993-91c6-a2517c4fca73" (UID: "42acbbb9-ea23-4993-91c6-a2517c4fca73"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:52:09.117658 kubelet[2038]: I1002 19:52:09.117309 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "42acbbb9-ea23-4993-91c6-a2517c4fca73" (UID: "42acbbb9-ea23-4993-91c6-a2517c4fca73"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:52:09.117658 kubelet[2038]: I1002 19:52:09.117461 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "42acbbb9-ea23-4993-91c6-a2517c4fca73" (UID: "42acbbb9-ea23-4993-91c6-a2517c4fca73"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:52:09.117658 kubelet[2038]: I1002 19:52:09.117474 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-cni-path" (OuterVolumeSpecName: "cni-path") pod "42acbbb9-ea23-4993-91c6-a2517c4fca73" (UID: "42acbbb9-ea23-4993-91c6-a2517c4fca73"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:52:09.117774 kubelet[2038]: I1002 19:52:09.117484 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "42acbbb9-ea23-4993-91c6-a2517c4fca73" (UID: "42acbbb9-ea23-4993-91c6-a2517c4fca73"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:52:09.117774 kubelet[2038]: I1002 19:52:09.117548 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-hostproc" (OuterVolumeSpecName: "hostproc") pod "42acbbb9-ea23-4993-91c6-a2517c4fca73" (UID: "42acbbb9-ea23-4993-91c6-a2517c4fca73"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:52:09.117774 kubelet[2038]: I1002 19:52:09.117711 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-hostproc\") pod \"42acbbb9-ea23-4993-91c6-a2517c4fca73\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " Oct 2 19:52:09.117774 kubelet[2038]: W1002 19:52:09.117721 2038 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/e71044a0-6967-4cdb-9dad-3dd0cf96b265/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:52:09.117774 kubelet[2038]: I1002 19:52:09.117742 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-bpf-maps\") pod \"42acbbb9-ea23-4993-91c6-a2517c4fca73\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " Oct 2 19:52:09.117774 kubelet[2038]: W1002 19:52:09.117757 2038 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/42acbbb9-ea23-4993-91c6-a2517c4fca73/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:52:09.118055 kubelet[2038]: I1002 19:52:09.117917 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "42acbbb9-ea23-4993-91c6-a2517c4fca73" (UID: "42acbbb9-ea23-4993-91c6-a2517c4fca73"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:52:09.118110 kubelet[2038]: I1002 19:52:09.117764 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/42acbbb9-ea23-4993-91c6-a2517c4fca73-clustermesh-secrets\") pod \"42acbbb9-ea23-4993-91c6-a2517c4fca73\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " Oct 2 19:52:09.118110 kubelet[2038]: I1002 19:52:09.118089 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-cilium-run\") pod \"42acbbb9-ea23-4993-91c6-a2517c4fca73\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " Oct 2 19:52:09.118110 kubelet[2038]: I1002 19:52:09.118107 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-lib-modules\") pod \"42acbbb9-ea23-4993-91c6-a2517c4fca73\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " Oct 2 19:52:09.118206 kubelet[2038]: I1002 19:52:09.118125 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-cilium-cgroup\") pod \"42acbbb9-ea23-4993-91c6-a2517c4fca73\" (UID: \"42acbbb9-ea23-4993-91c6-a2517c4fca73\") " Oct 2 19:52:09.118206 kubelet[2038]: I1002 19:52:09.118145 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-9bh8v\" (UniqueName: \"kubernetes.io/projected/e71044a0-6967-4cdb-9dad-3dd0cf96b265-kube-api-access-9bh8v\") pod \"e71044a0-6967-4cdb-9dad-3dd0cf96b265\" (UID: \"e71044a0-6967-4cdb-9dad-3dd0cf96b265\") " Oct 2 19:52:09.118258 kubelet[2038]: I1002 19:52:09.118209 2038 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 19:52:09.118258 kubelet[2038]: I1002 19:52:09.118221 2038 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 19:52:09.118258 kubelet[2038]: I1002 19:52:09.118230 2038 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:52:09.118258 kubelet[2038]: I1002 19:52:09.118239 2038 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 19:52:09.118258 kubelet[2038]: I1002 19:52:09.118248 2038 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 19:52:09.118258 kubelet[2038]: I1002 19:52:09.118256 2038 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 19:52:09.118392 kubelet[2038]: I1002 19:52:09.118265 2038 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 19:52:09.118542 kubelet[2038]: I1002 19:52:09.118422 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "42acbbb9-ea23-4993-91c6-a2517c4fca73" (UID: "42acbbb9-ea23-4993-91c6-a2517c4fca73"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:52:09.118542 kubelet[2038]: I1002 19:52:09.118464 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "42acbbb9-ea23-4993-91c6-a2517c4fca73" (UID: "42acbbb9-ea23-4993-91c6-a2517c4fca73"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:52:09.118542 kubelet[2038]: I1002 19:52:09.118509 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "42acbbb9-ea23-4993-91c6-a2517c4fca73" (UID: "42acbbb9-ea23-4993-91c6-a2517c4fca73"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:52:09.123346 kubelet[2038]: I1002 19:52:09.120241 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/42acbbb9-ea23-4993-91c6-a2517c4fca73-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "42acbbb9-ea23-4993-91c6-a2517c4fca73" (UID: "42acbbb9-ea23-4993-91c6-a2517c4fca73"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:52:09.123346 kubelet[2038]: I1002 19:52:09.120339 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/e71044a0-6967-4cdb-9dad-3dd0cf96b265-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "e71044a0-6967-4cdb-9dad-3dd0cf96b265" (UID: "e71044a0-6967-4cdb-9dad-3dd0cf96b265"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:52:09.124833 kubelet[2038]: I1002 19:52:09.124793 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/42acbbb9-ea23-4993-91c6-a2517c4fca73-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "42acbbb9-ea23-4993-91c6-a2517c4fca73" (UID: "42acbbb9-ea23-4993-91c6-a2517c4fca73"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:52:09.125253 kubelet[2038]: I1002 19:52:09.125208 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/e71044a0-6967-4cdb-9dad-3dd0cf96b265-kube-api-access-9bh8v" (OuterVolumeSpecName: "kube-api-access-9bh8v") pod "e71044a0-6967-4cdb-9dad-3dd0cf96b265" (UID: "e71044a0-6967-4cdb-9dad-3dd0cf96b265"). InnerVolumeSpecName "kube-api-access-9bh8v". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:52:09.126051 kubelet[2038]: I1002 19:52:09.125475 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/42acbbb9-ea23-4993-91c6-a2517c4fca73-kube-api-access-b82d2" (OuterVolumeSpecName: "kube-api-access-b82d2") pod "42acbbb9-ea23-4993-91c6-a2517c4fca73" (UID: "42acbbb9-ea23-4993-91c6-a2517c4fca73"). InnerVolumeSpecName "kube-api-access-b82d2". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:52:09.127073 kubelet[2038]: I1002 19:52:09.126944 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/42acbbb9-ea23-4993-91c6-a2517c4fca73-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "42acbbb9-ea23-4993-91c6-a2517c4fca73" (UID: "42acbbb9-ea23-4993-91c6-a2517c4fca73"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:52:09.219333 kubelet[2038]: I1002 19:52:09.219279 2038 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/42acbbb9-ea23-4993-91c6-a2517c4fca73-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:52:09.219333 kubelet[2038]: I1002 19:52:09.219312 2038 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 19:52:09.219333 kubelet[2038]: I1002 19:52:09.219322 2038 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 19:52:09.219333 kubelet[2038]: I1002 19:52:09.219332 2038 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/42acbbb9-ea23-4993-91c6-a2517c4fca73-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 19:52:09.219333 kubelet[2038]: I1002 19:52:09.219345 2038 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-9bh8v\" (UniqueName: \"kubernetes.io/projected/e71044a0-6967-4cdb-9dad-3dd0cf96b265-kube-api-access-9bh8v\") on node \"localhost\" DevicePath \"\"" Oct 2 19:52:09.219333 kubelet[2038]: I1002 19:52:09.219355 2038 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/42acbbb9-ea23-4993-91c6-a2517c4fca73-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:52:09.219622 kubelet[2038]: I1002 19:52:09.219364 2038 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/42acbbb9-ea23-4993-91c6-a2517c4fca73-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 19:52:09.219622 kubelet[2038]: I1002 19:52:09.219374 2038 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-b82d2\" (UniqueName: \"kubernetes.io/projected/42acbbb9-ea23-4993-91c6-a2517c4fca73-kube-api-access-b82d2\") on node \"localhost\" DevicePath \"\"" Oct 2 19:52:09.219622 kubelet[2038]: I1002 19:52:09.219382 2038 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e71044a0-6967-4cdb-9dad-3dd0cf96b265-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:52:09.795143 kubelet[2038]: I1002 19:52:09.795108 2038 scope.go:115] "RemoveContainer" containerID="d5e93018f0e233a375b79130e4b8ba129be566f487dfa847a7b74bf706adb8c9" Oct 2 19:52:09.796329 env[1142]: time="2023-10-02T19:52:09.795958614Z" level=info msg="RemoveContainer for \"d5e93018f0e233a375b79130e4b8ba129be566f487dfa847a7b74bf706adb8c9\"" Oct 2 19:52:09.800243 systemd[1]: Removed slice kubepods-besteffort-pode71044a0_6967_4cdb_9dad_3dd0cf96b265.slice. Oct 2 19:52:09.801647 env[1142]: time="2023-10-02T19:52:09.801544376Z" level=info msg="RemoveContainer for \"d5e93018f0e233a375b79130e4b8ba129be566f487dfa847a7b74bf706adb8c9\" returns successfully" Oct 2 19:52:09.801760 kubelet[2038]: I1002 19:52:09.801712 2038 scope.go:115] "RemoveContainer" containerID="e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9" Oct 2 19:52:09.803232 env[1142]: time="2023-10-02T19:52:09.803198136Z" level=info msg="RemoveContainer for \"e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9\"" Oct 2 19:52:09.804361 systemd[1]: Removed slice kubepods-burstable-pod42acbbb9_ea23_4993_91c6_a2517c4fca73.slice. Oct 2 19:52:09.805774 env[1142]: time="2023-10-02T19:52:09.805725097Z" level=info msg="RemoveContainer for \"e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9\" returns successfully" Oct 2 19:52:09.805927 kubelet[2038]: I1002 19:52:09.805882 2038 scope.go:115] "RemoveContainer" containerID="e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9" Oct 2 19:52:09.806259 env[1142]: time="2023-10-02T19:52:09.806172297Z" level=error msg="ContainerStatus for \"e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9\": not found" Oct 2 19:52:09.806400 kubelet[2038]: E1002 19:52:09.806383 2038 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9\": not found" containerID="e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9" Oct 2 19:52:09.806458 kubelet[2038]: I1002 19:52:09.806418 2038 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9} err="failed to get container status \"e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9\": rpc error: code = NotFound desc = an error occurred when try to find container \"e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9\": not found" Oct 2 19:52:09.871178 systemd[1]: var-lib-kubelet-pods-42acbbb9\x2dea23\x2d4993\x2d91c6\x2da2517c4fca73-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:52:09.871278 systemd[1]: var-lib-kubelet-pods-42acbbb9\x2dea23\x2d4993\x2d91c6\x2da2517c4fca73-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:52:09.871336 systemd[1]: var-lib-kubelet-pods-e71044a0\x2d6967\x2d4cdb\x2d9dad\x2d3dd0cf96b265-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d9bh8v.mount: Deactivated successfully. Oct 2 19:52:09.871388 systemd[1]: var-lib-kubelet-pods-42acbbb9\x2dea23\x2d4993\x2d91c6\x2da2517c4fca73-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2db82d2.mount: Deactivated successfully. Oct 2 19:52:10.416827 env[1142]: time="2023-10-02T19:52:10.416733923Z" level=info msg="StopPodSandbox for \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\"" Oct 2 19:52:10.417180 env[1142]: time="2023-10-02T19:52:10.416836923Z" level=info msg="TearDown network for sandbox \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\" successfully" Oct 2 19:52:10.417180 env[1142]: time="2023-10-02T19:52:10.416870323Z" level=info msg="StopPodSandbox for \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\" returns successfully" Oct 2 19:52:10.417518 env[1142]: time="2023-10-02T19:52:10.417368003Z" level=info msg="StopContainer for \"e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9\" with timeout 1 (s)" Oct 2 19:52:10.417518 env[1142]: time="2023-10-02T19:52:10.417404643Z" level=error msg="StopContainer for \"e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9\": not found" Oct 2 19:52:10.417900 kubelet[2038]: E1002 19:52:10.417695 2038 remote_runtime.go:349] "StopContainer from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9\": not found" containerID="e78a8f00aeb9431163e8d4bf1e8e348fe71f6504526986d7dae7cb203c92b9c9" Oct 2 19:52:10.418427 env[1142]: time="2023-10-02T19:52:10.418264083Z" level=info msg="StopPodSandbox for \"acaefea9892b02227a43637751dcd2d3176e9bd6a3d0f87d5910b7f65fb15cd3\"" Oct 2 19:52:10.418427 env[1142]: time="2023-10-02T19:52:10.418335763Z" level=info msg="TearDown network for sandbox \"acaefea9892b02227a43637751dcd2d3176e9bd6a3d0f87d5910b7f65fb15cd3\" successfully" Oct 2 19:52:10.418427 env[1142]: time="2023-10-02T19:52:10.418367484Z" level=info msg="StopPodSandbox for \"acaefea9892b02227a43637751dcd2d3176e9bd6a3d0f87d5910b7f65fb15cd3\" returns successfully" Oct 2 19:52:10.418556 kubelet[2038]: I1002 19:52:10.418388 2038 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=42acbbb9-ea23-4993-91c6-a2517c4fca73 path="/var/lib/kubelet/pods/42acbbb9-ea23-4993-91c6-a2517c4fca73/volumes" Oct 2 19:52:10.419253 kubelet[2038]: I1002 19:52:10.419167 2038 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=e71044a0-6967-4cdb-9dad-3dd0cf96b265 path="/var/lib/kubelet/pods/e71044a0-6967-4cdb-9dad-3dd0cf96b265/volumes" Oct 2 19:52:10.830407 sshd[2992]: pam_unix(sshd:session): session closed for user core Oct 2 19:52:10.832000 audit[2992]: USER_END pid=2992 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:52:10.832000 audit[2992]: CRED_DISP pid=2992 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:52:10.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.15:22-10.0.0.1:54764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:10.834908 systemd[1]: Started sshd@29-10.0.0.15:22-10.0.0.1:54764.service. Oct 2 19:52:10.834000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.15:22-10.0.0.1:54758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:10.835371 systemd[1]: sshd@28-10.0.0.15:22-10.0.0.1:54758.service: Deactivated successfully. Oct 2 19:52:10.836411 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:52:10.836489 systemd-logind[1128]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:52:10.836605 systemd[1]: session-29.scope: Consumed 1.817s CPU time. Oct 2 19:52:10.837826 systemd-logind[1128]: Removed session 29. Oct 2 19:52:10.874000 audit[3104]: USER_ACCT pid=3104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:52:10.876002 sshd[3104]: Accepted publickey for core from 10.0.0.1 port 54764 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:52:10.875000 audit[3104]: CRED_ACQ pid=3104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:52:10.875000 audit[3104]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff26cb5f0 a2=3 a3=1 items=0 ppid=1 pid=3104 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:10.875000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:52:10.877242 sshd[3104]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:52:10.882123 systemd-logind[1128]: New session 30 of user core. Oct 2 19:52:10.882786 systemd[1]: Started session-30.scope. Oct 2 19:52:10.887000 audit[3104]: USER_START pid=3104 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:52:10.888000 audit[3108]: CRED_ACQ pid=3108 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:52:11.449907 kubelet[2038]: E1002 19:52:11.449882 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:52:11.866000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:52:11.874007 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 19:52:11.874111 kernel: audit: type=1400 audit(1696276331.866:1343): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:52:11.874135 kernel: audit: type=1300 audit(1696276331.866:1343): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002578150 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:52:11.866000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002578150 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:52:11.866000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:52:11.882747 kernel: audit: type=1327 audit(1696276331.866:1343): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:52:11.882826 kernel: audit: type=1400 audit(1696276331.868:1344): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:52:11.868000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:52:11.868000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400278a020 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:52:11.891105 kernel: audit: type=1300 audit(1696276331.868:1344): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400278a020 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:52:11.891193 kernel: audit: type=1327 audit(1696276331.868:1344): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:52:11.868000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:52:11.965741 kubelet[2038]: I1002 19:52:11.965698 2038 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:52:11.965741 kubelet[2038]: E1002 19:52:11.965749 2038 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="42acbbb9-ea23-4993-91c6-a2517c4fca73" containerName="mount-cgroup" Oct 2 19:52:11.966010 kubelet[2038]: E1002 19:52:11.965758 2038 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e71044a0-6967-4cdb-9dad-3dd0cf96b265" containerName="cilium-operator" Oct 2 19:52:11.966010 kubelet[2038]: E1002 19:52:11.965766 2038 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="42acbbb9-ea23-4993-91c6-a2517c4fca73" containerName="mount-cgroup" Oct 2 19:52:11.966010 kubelet[2038]: E1002 19:52:11.965772 2038 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="42acbbb9-ea23-4993-91c6-a2517c4fca73" containerName="mount-cgroup" Oct 2 19:52:11.966010 kubelet[2038]: E1002 19:52:11.965778 2038 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="42acbbb9-ea23-4993-91c6-a2517c4fca73" containerName="mount-cgroup" Oct 2 19:52:11.966010 kubelet[2038]: E1002 19:52:11.965784 2038 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="42acbbb9-ea23-4993-91c6-a2517c4fca73" containerName="mount-cgroup" Oct 2 19:52:11.966010 kubelet[2038]: I1002 19:52:11.965803 2038 memory_manager.go:346] "RemoveStaleState removing state" podUID="42acbbb9-ea23-4993-91c6-a2517c4fca73" containerName="mount-cgroup" Oct 2 19:52:11.966010 kubelet[2038]: I1002 19:52:11.965808 2038 memory_manager.go:346] "RemoveStaleState removing state" podUID="42acbbb9-ea23-4993-91c6-a2517c4fca73" containerName="mount-cgroup" Oct 2 19:52:11.966010 kubelet[2038]: I1002 19:52:11.965815 2038 memory_manager.go:346] "RemoveStaleState removing state" podUID="e71044a0-6967-4cdb-9dad-3dd0cf96b265" containerName="cilium-operator" Oct 2 19:52:11.966010 kubelet[2038]: I1002 19:52:11.965820 2038 memory_manager.go:346] "RemoveStaleState removing state" podUID="42acbbb9-ea23-4993-91c6-a2517c4fca73" containerName="mount-cgroup" Oct 2 19:52:11.966010 kubelet[2038]: I1002 19:52:11.965826 2038 memory_manager.go:346] "RemoveStaleState removing state" podUID="42acbbb9-ea23-4993-91c6-a2517c4fca73" containerName="mount-cgroup" Oct 2 19:52:11.966010 kubelet[2038]: E1002 19:52:11.965839 2038 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="42acbbb9-ea23-4993-91c6-a2517c4fca73" containerName="mount-cgroup" Oct 2 19:52:11.966010 kubelet[2038]: I1002 19:52:11.965852 2038 memory_manager.go:346] "RemoveStaleState removing state" podUID="42acbbb9-ea23-4993-91c6-a2517c4fca73" containerName="mount-cgroup" Oct 2 19:52:11.966366 kubelet[2038]: I1002 19:52:11.965858 2038 memory_manager.go:346] "RemoveStaleState removing state" podUID="42acbbb9-ea23-4993-91c6-a2517c4fca73" containerName="mount-cgroup" Oct 2 19:52:11.971071 systemd[1]: Created slice kubepods-burstable-podaa2b2efc_aa2f_40f5_a7dd_ce576daa4a9f.slice. Oct 2 19:52:12.135705 kubelet[2038]: I1002 19:52:12.135571 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-hubble-tls\") pod \"cilium-g7dbf\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " pod="kube-system/cilium-g7dbf" Oct 2 19:52:12.135705 kubelet[2038]: I1002 19:52:12.135665 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-xtables-lock\") pod \"cilium-g7dbf\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " pod="kube-system/cilium-g7dbf" Oct 2 19:52:12.135849 kubelet[2038]: I1002 19:52:12.135721 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-cilium-run\") pod \"cilium-g7dbf\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " pod="kube-system/cilium-g7dbf" Oct 2 19:52:12.135849 kubelet[2038]: I1002 19:52:12.135744 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-bpf-maps\") pod \"cilium-g7dbf\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " pod="kube-system/cilium-g7dbf" Oct 2 19:52:12.135849 kubelet[2038]: I1002 19:52:12.135765 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-host-proc-sys-kernel\") pod \"cilium-g7dbf\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " pod="kube-system/cilium-g7dbf" Oct 2 19:52:12.135849 kubelet[2038]: I1002 19:52:12.135827 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-cni-path\") pod \"cilium-g7dbf\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " pod="kube-system/cilium-g7dbf" Oct 2 19:52:12.135968 kubelet[2038]: I1002 19:52:12.135847 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-clustermesh-secrets\") pod \"cilium-g7dbf\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " pod="kube-system/cilium-g7dbf" Oct 2 19:52:12.135968 kubelet[2038]: I1002 19:52:12.135876 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-cilium-config-path\") pod \"cilium-g7dbf\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " pod="kube-system/cilium-g7dbf" Oct 2 19:52:12.135968 kubelet[2038]: I1002 19:52:12.135904 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-etc-cni-netd\") pod \"cilium-g7dbf\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " pod="kube-system/cilium-g7dbf" Oct 2 19:52:12.135968 kubelet[2038]: I1002 19:52:12.135945 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-cilium-ipsec-secrets\") pod \"cilium-g7dbf\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " pod="kube-system/cilium-g7dbf" Oct 2 19:52:12.135968 kubelet[2038]: I1002 19:52:12.135966 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-hostproc\") pod \"cilium-g7dbf\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " pod="kube-system/cilium-g7dbf" Oct 2 19:52:12.136080 kubelet[2038]: I1002 19:52:12.135986 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-cilium-cgroup\") pod \"cilium-g7dbf\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " pod="kube-system/cilium-g7dbf" Oct 2 19:52:12.136080 kubelet[2038]: I1002 19:52:12.136016 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-lib-modules\") pod \"cilium-g7dbf\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " pod="kube-system/cilium-g7dbf" Oct 2 19:52:12.136080 kubelet[2038]: I1002 19:52:12.136036 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-host-proc-sys-net\") pod \"cilium-g7dbf\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " pod="kube-system/cilium-g7dbf" Oct 2 19:52:12.136080 kubelet[2038]: I1002 19:52:12.136055 2038 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rt7fn\" (UniqueName: \"kubernetes.io/projected/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-kube-api-access-rt7fn\") pod \"cilium-g7dbf\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " pod="kube-system/cilium-g7dbf" Oct 2 19:52:12.273164 kubelet[2038]: E1002 19:52:12.273116 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:52:12.274933 env[1142]: time="2023-10-02T19:52:12.274677444Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-g7dbf,Uid:aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f,Namespace:kube-system,Attempt:0,}" Oct 2 19:52:12.659984 env[1142]: time="2023-10-02T19:52:12.659936126Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:52:12.661606 env[1142]: time="2023-10-02T19:52:12.661556087Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:52:12.663364 env[1142]: time="2023-10-02T19:52:12.663329529Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:52:12.665013 env[1142]: time="2023-10-02T19:52:12.664982130Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:52:12.697013 env[1142]: time="2023-10-02T19:52:12.696800796Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:52:12.697013 env[1142]: time="2023-10-02T19:52:12.696849917Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:52:12.697013 env[1142]: time="2023-10-02T19:52:12.696859957Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:52:12.697303 env[1142]: time="2023-10-02T19:52:12.697074117Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/72a9f3f639c6e1574dd3d05ff7f609c4eb95cf1af24c9802e7c33c4dcabbb19b pid=3127 runtime=io.containerd.runc.v2 Oct 2 19:52:12.710732 systemd[1]: Started cri-containerd-72a9f3f639c6e1574dd3d05ff7f609c4eb95cf1af24c9802e7c33c4dcabbb19b.scope. Oct 2 19:52:12.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.732272 kernel: audit: type=1400 audit(1696276332.726:1345): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.732318 kernel: audit: type=1400 audit(1696276332.726:1346): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.732355 kernel: audit: type=1400 audit(1696276332.726:1347): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.734669 kernel: audit: type=1400 audit(1696276332.726:1348): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.728000 audit: BPF prog-id=128 op=LOAD Oct 2 19:52:12.728000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.728000 audit[3136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3127 pid=3136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:12.728000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732613966336636333963366531353734646433643035666637663630 Oct 2 19:52:12.728000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.728000 audit[3136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3127 pid=3136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:12.728000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732613966336636333963366531353734646433643035666637663630 Oct 2 19:52:12.728000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.728000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.728000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.728000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.728000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.728000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.728000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.728000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.728000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.728000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.728000 audit: BPF prog-id=129 op=LOAD Oct 2 19:52:12.728000 audit[3136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3127 pid=3136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:12.728000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732613966336636333963366531353734646433643035666637663630 Oct 2 19:52:12.730000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.730000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.730000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.730000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.730000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.730000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.730000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.730000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.730000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.730000 audit: BPF prog-id=130 op=LOAD Oct 2 19:52:12.730000 audit[3136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3127 pid=3136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:12.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732613966336636333963366531353734646433643035666637663630 Oct 2 19:52:12.733000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:52:12.733000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:52:12.733000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.733000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.733000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.733000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.733000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.733000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.733000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.733000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.733000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.733000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:12.733000 audit: BPF prog-id=131 op=LOAD Oct 2 19:52:12.733000 audit[3136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3127 pid=3136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:12.733000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732613966336636333963366531353734646433643035666637663630 Oct 2 19:52:12.748276 env[1142]: time="2023-10-02T19:52:12.748238039Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-g7dbf,Uid:aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f,Namespace:kube-system,Attempt:0,} returns sandbox id \"72a9f3f639c6e1574dd3d05ff7f609c4eb95cf1af24c9802e7c33c4dcabbb19b\"" Oct 2 19:52:12.750288 kubelet[2038]: E1002 19:52:12.748835 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:52:12.752464 env[1142]: time="2023-10-02T19:52:12.751891242Z" level=info msg="CreateContainer within sandbox \"72a9f3f639c6e1574dd3d05ff7f609c4eb95cf1af24c9802e7c33c4dcabbb19b\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:52:12.763364 env[1142]: time="2023-10-02T19:52:12.763304452Z" level=info msg="CreateContainer within sandbox \"72a9f3f639c6e1574dd3d05ff7f609c4eb95cf1af24c9802e7c33c4dcabbb19b\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070\"" Oct 2 19:52:12.763927 env[1142]: time="2023-10-02T19:52:12.763878613Z" level=info msg="StartContainer for \"7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070\"" Oct 2 19:52:12.780252 systemd[1]: Started cri-containerd-7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070.scope. Oct 2 19:52:12.800034 systemd[1]: cri-containerd-7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070.scope: Deactivated successfully. Oct 2 19:52:12.815715 env[1142]: time="2023-10-02T19:52:12.815652176Z" level=info msg="shim disconnected" id=7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070 Oct 2 19:52:12.815715 env[1142]: time="2023-10-02T19:52:12.815702496Z" level=warning msg="cleaning up after shim disconnected" id=7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070 namespace=k8s.io Oct 2 19:52:12.815715 env[1142]: time="2023-10-02T19:52:12.815711936Z" level=info msg="cleaning up dead shim" Oct 2 19:52:12.825003 env[1142]: time="2023-10-02T19:52:12.824301383Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:52:12Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3184 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:52:12Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:52:12.825003 env[1142]: time="2023-10-02T19:52:12.824527783Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 19:52:12.825532 env[1142]: time="2023-10-02T19:52:12.825491944Z" level=error msg="Failed to pipe stdout of container \"7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070\"" error="reading from a closed fifo" Oct 2 19:52:12.825585 env[1142]: time="2023-10-02T19:52:12.825564304Z" level=error msg="Failed to pipe stderr of container \"7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070\"" error="reading from a closed fifo" Oct 2 19:52:12.827550 env[1142]: time="2023-10-02T19:52:12.827496506Z" level=error msg="StartContainer for \"7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:52:12.827857 kubelet[2038]: E1002 19:52:12.827818 2038 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070" Oct 2 19:52:12.828030 kubelet[2038]: E1002 19:52:12.827925 2038 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:52:12.828030 kubelet[2038]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:52:12.828030 kubelet[2038]: rm /hostbin/cilium-mount Oct 2 19:52:12.828030 kubelet[2038]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rt7fn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-g7dbf_kube-system(aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:52:12.829837 kubelet[2038]: E1002 19:52:12.827963 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-g7dbf" podUID=aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f Oct 2 19:52:13.090000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:52:13.090000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400ab10740 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:52:13.090000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:52:13.090000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7043 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:52:13.090000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:52:13.090000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4013f0c6f0 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:52:13.090000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:52:13.090000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4013c99bc0 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:52:13.090000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:52:13.090000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7051 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:52:13.090000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4014133380 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:52:13.090000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:52:13.092000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:52:13.092000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:52:13.092000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40141333b0 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:52:13.092000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:52:13.092000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400b178e20 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:52:13.092000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:52:13.416382 kubelet[2038]: E1002 19:52:13.416276 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:52:13.809235 kubelet[2038]: E1002 19:52:13.809202 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:52:13.811177 env[1142]: time="2023-10-02T19:52:13.811131805Z" level=info msg="CreateContainer within sandbox \"72a9f3f639c6e1574dd3d05ff7f609c4eb95cf1af24c9802e7c33c4dcabbb19b\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:52:13.821789 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount381680801.mount: Deactivated successfully. Oct 2 19:52:13.825327 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1774537410.mount: Deactivated successfully. Oct 2 19:52:13.829169 env[1142]: time="2023-10-02T19:52:13.829125023Z" level=info msg="CreateContainer within sandbox \"72a9f3f639c6e1574dd3d05ff7f609c4eb95cf1af24c9802e7c33c4dcabbb19b\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119\"" Oct 2 19:52:13.831789 env[1142]: time="2023-10-02T19:52:13.831746706Z" level=info msg="StartContainer for \"f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119\"" Oct 2 19:52:13.858231 systemd[1]: Started cri-containerd-f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119.scope. Oct 2 19:52:13.875432 systemd[1]: cri-containerd-f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119.scope: Deactivated successfully. Oct 2 19:52:13.885184 env[1142]: time="2023-10-02T19:52:13.885129561Z" level=info msg="shim disconnected" id=f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119 Oct 2 19:52:13.885184 env[1142]: time="2023-10-02T19:52:13.885182441Z" level=warning msg="cleaning up after shim disconnected" id=f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119 namespace=k8s.io Oct 2 19:52:13.885184 env[1142]: time="2023-10-02T19:52:13.885193321Z" level=info msg="cleaning up dead shim" Oct 2 19:52:13.893748 env[1142]: time="2023-10-02T19:52:13.893697010Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:52:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3221 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:52:13Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:52:13.894029 env[1142]: time="2023-10-02T19:52:13.893973450Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 19:52:13.894218 env[1142]: time="2023-10-02T19:52:13.894170810Z" level=error msg="Failed to pipe stdout of container \"f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119\"" error="reading from a closed fifo" Oct 2 19:52:13.894328 env[1142]: time="2023-10-02T19:52:13.894294170Z" level=error msg="Failed to pipe stderr of container \"f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119\"" error="reading from a closed fifo" Oct 2 19:52:13.896856 env[1142]: time="2023-10-02T19:52:13.896805373Z" level=error msg="StartContainer for \"f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:52:13.899374 kubelet[2038]: E1002 19:52:13.899336 2038 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119" Oct 2 19:52:13.899514 kubelet[2038]: E1002 19:52:13.899474 2038 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:52:13.899514 kubelet[2038]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:52:13.899514 kubelet[2038]: rm /hostbin/cilium-mount Oct 2 19:52:13.899514 kubelet[2038]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rt7fn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-g7dbf_kube-system(aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:52:13.899659 kubelet[2038]: E1002 19:52:13.899583 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-g7dbf" podUID=aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f Oct 2 19:52:14.811814 kubelet[2038]: I1002 19:52:14.811781 2038 scope.go:115] "RemoveContainer" containerID="7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070" Oct 2 19:52:14.812150 kubelet[2038]: I1002 19:52:14.811862 2038 scope.go:115] "RemoveContainer" containerID="7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070" Oct 2 19:52:14.813063 env[1142]: time="2023-10-02T19:52:14.813017992Z" level=info msg="RemoveContainer for \"7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070\"" Oct 2 19:52:14.814031 env[1142]: time="2023-10-02T19:52:14.814006433Z" level=info msg="RemoveContainer for \"7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070\"" Oct 2 19:52:14.814257 env[1142]: time="2023-10-02T19:52:14.814205513Z" level=error msg="RemoveContainer for \"7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070\" failed" error="failed to set removing state for container \"7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070\": container is already in removing state" Oct 2 19:52:14.814381 kubelet[2038]: E1002 19:52:14.814363 2038 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070\": container is already in removing state" containerID="7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070" Oct 2 19:52:14.814430 kubelet[2038]: I1002 19:52:14.814395 2038 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070} err="rpc error: code = Unknown desc = failed to set removing state for container \"7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070\": container is already in removing state" Oct 2 19:52:14.816879 env[1142]: time="2023-10-02T19:52:14.816850997Z" level=info msg="RemoveContainer for \"7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070\" returns successfully" Oct 2 19:52:14.817333 kubelet[2038]: E1002 19:52:14.817319 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:52:14.817811 kubelet[2038]: E1002 19:52:14.817786 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-g7dbf_kube-system(aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f)\"" pod="kube-system/cilium-g7dbf" podUID=aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f Oct 2 19:52:15.814482 kubelet[2038]: E1002 19:52:15.814425 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:52:15.814865 kubelet[2038]: E1002 19:52:15.814679 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-g7dbf_kube-system(aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f)\"" pod="kube-system/cilium-g7dbf" podUID=aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f Oct 2 19:52:15.921125 kubelet[2038]: W1002 19:52:15.921065 2038 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podaa2b2efc_aa2f_40f5_a7dd_ce576daa4a9f.slice/cri-containerd-7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070.scope WatchSource:0}: container "7f78fcd9f08da1ca808861d87e1e04fc57d649f393adf2120680a2838fd7c070" in namespace "k8s.io": not found Oct 2 19:52:16.340929 env[1142]: time="2023-10-02T19:52:16.340869093Z" level=info msg="StopPodSandbox for \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\"" Oct 2 19:52:16.341277 env[1142]: time="2023-10-02T19:52:16.340999733Z" level=info msg="TearDown network for sandbox \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\" successfully" Oct 2 19:52:16.341277 env[1142]: time="2023-10-02T19:52:16.341041533Z" level=info msg="StopPodSandbox for \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\" returns successfully" Oct 2 19:52:16.341397 env[1142]: time="2023-10-02T19:52:16.341362974Z" level=info msg="RemovePodSandbox for \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\"" Oct 2 19:52:16.341465 env[1142]: time="2023-10-02T19:52:16.341402254Z" level=info msg="Forcibly stopping sandbox \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\"" Oct 2 19:52:16.341505 env[1142]: time="2023-10-02T19:52:16.341490574Z" level=info msg="TearDown network for sandbox \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\" successfully" Oct 2 19:52:16.343959 env[1142]: time="2023-10-02T19:52:16.343914858Z" level=info msg="RemovePodSandbox \"be8b056ced20a3451df679e67a46ef6f15205b39a99e9e94e9f30e4dbf1dd045\" returns successfully" Oct 2 19:52:16.344308 env[1142]: time="2023-10-02T19:52:16.344281698Z" level=info msg="StopPodSandbox for \"acaefea9892b02227a43637751dcd2d3176e9bd6a3d0f87d5910b7f65fb15cd3\"" Oct 2 19:52:16.344402 env[1142]: time="2023-10-02T19:52:16.344367658Z" level=info msg="TearDown network for sandbox \"acaefea9892b02227a43637751dcd2d3176e9bd6a3d0f87d5910b7f65fb15cd3\" successfully" Oct 2 19:52:16.344445 env[1142]: time="2023-10-02T19:52:16.344400698Z" level=info msg="StopPodSandbox for \"acaefea9892b02227a43637751dcd2d3176e9bd6a3d0f87d5910b7f65fb15cd3\" returns successfully" Oct 2 19:52:16.344690 env[1142]: time="2023-10-02T19:52:16.344666739Z" level=info msg="RemovePodSandbox for \"acaefea9892b02227a43637751dcd2d3176e9bd6a3d0f87d5910b7f65fb15cd3\"" Oct 2 19:52:16.344731 env[1142]: time="2023-10-02T19:52:16.344696939Z" level=info msg="Forcibly stopping sandbox \"acaefea9892b02227a43637751dcd2d3176e9bd6a3d0f87d5910b7f65fb15cd3\"" Oct 2 19:52:16.344774 env[1142]: time="2023-10-02T19:52:16.344758699Z" level=info msg="TearDown network for sandbox \"acaefea9892b02227a43637751dcd2d3176e9bd6a3d0f87d5910b7f65fb15cd3\" successfully" Oct 2 19:52:16.346842 env[1142]: time="2023-10-02T19:52:16.346809982Z" level=info msg="RemovePodSandbox \"acaefea9892b02227a43637751dcd2d3176e9bd6a3d0f87d5910b7f65fb15cd3\" returns successfully" Oct 2 19:52:16.451061 kubelet[2038]: E1002 19:52:16.451034 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:52:17.415632 kubelet[2038]: E1002 19:52:17.415594 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:52:19.028095 kubelet[2038]: W1002 19:52:19.028056 2038 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podaa2b2efc_aa2f_40f5_a7dd_ce576daa4a9f.slice/cri-containerd-f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119.scope WatchSource:0}: task f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119 not found: not found Oct 2 19:52:21.451862 kubelet[2038]: E1002 19:52:21.451823 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:52:26.453223 kubelet[2038]: E1002 19:52:26.453188 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:52:28.415695 kubelet[2038]: E1002 19:52:28.415615 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:52:28.417939 env[1142]: time="2023-10-02T19:52:28.417865897Z" level=info msg="CreateContainer within sandbox \"72a9f3f639c6e1574dd3d05ff7f609c4eb95cf1af24c9802e7c33c4dcabbb19b\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:52:28.427166 env[1142]: time="2023-10-02T19:52:28.427115731Z" level=info msg="CreateContainer within sandbox \"72a9f3f639c6e1574dd3d05ff7f609c4eb95cf1af24c9802e7c33c4dcabbb19b\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030\"" Oct 2 19:52:28.427599 env[1142]: time="2023-10-02T19:52:28.427567932Z" level=info msg="StartContainer for \"05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030\"" Oct 2 19:52:28.444859 systemd[1]: Started cri-containerd-05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030.scope. Oct 2 19:52:28.464460 systemd[1]: cri-containerd-05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030.scope: Deactivated successfully. Oct 2 19:52:28.474185 env[1142]: time="2023-10-02T19:52:28.474128900Z" level=info msg="shim disconnected" id=05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030 Oct 2 19:52:28.474185 env[1142]: time="2023-10-02T19:52:28.474184421Z" level=warning msg="cleaning up after shim disconnected" id=05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030 namespace=k8s.io Oct 2 19:52:28.474185 env[1142]: time="2023-10-02T19:52:28.474195181Z" level=info msg="cleaning up dead shim" Oct 2 19:52:28.482733 env[1142]: time="2023-10-02T19:52:28.482685691Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:52:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3258 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:52:28Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:52:28.483002 env[1142]: time="2023-10-02T19:52:28.482947132Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 19:52:28.483230 env[1142]: time="2023-10-02T19:52:28.483189293Z" level=error msg="Failed to pipe stderr of container \"05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030\"" error="reading from a closed fifo" Oct 2 19:52:28.483583 env[1142]: time="2023-10-02T19:52:28.483548254Z" level=error msg="Failed to pipe stdout of container \"05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030\"" error="reading from a closed fifo" Oct 2 19:52:28.499233 env[1142]: time="2023-10-02T19:52:28.499168071Z" level=error msg="StartContainer for \"05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:52:28.499488 kubelet[2038]: E1002 19:52:28.499459 2038 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030" Oct 2 19:52:28.499626 kubelet[2038]: E1002 19:52:28.499581 2038 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:52:28.499626 kubelet[2038]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:52:28.499626 kubelet[2038]: rm /hostbin/cilium-mount Oct 2 19:52:28.499626 kubelet[2038]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rt7fn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-g7dbf_kube-system(aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:52:28.499828 kubelet[2038]: E1002 19:52:28.499644 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-g7dbf" podUID=aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f Oct 2 19:52:28.837630 kubelet[2038]: I1002 19:52:28.837585 2038 scope.go:115] "RemoveContainer" containerID="f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119" Oct 2 19:52:28.838024 kubelet[2038]: I1002 19:52:28.837910 2038 scope.go:115] "RemoveContainer" containerID="f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119" Oct 2 19:52:28.839289 env[1142]: time="2023-10-02T19:52:28.839248258Z" level=info msg="RemoveContainer for \"f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119\"" Oct 2 19:52:28.839463 env[1142]: time="2023-10-02T19:52:28.839252738Z" level=info msg="RemoveContainer for \"f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119\"" Oct 2 19:52:28.839615 env[1142]: time="2023-10-02T19:52:28.839581820Z" level=error msg="RemoveContainer for \"f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119\" failed" error="failed to set removing state for container \"f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119\": container is already in removing state" Oct 2 19:52:28.840401 kubelet[2038]: E1002 19:52:28.840342 2038 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119\": container is already in removing state" containerID="f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119" Oct 2 19:52:28.840401 kubelet[2038]: I1002 19:52:28.840380 2038 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119} err="rpc error: code = Unknown desc = failed to set removing state for container \"f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119\": container is already in removing state" Oct 2 19:52:28.843516 env[1142]: time="2023-10-02T19:52:28.841902388Z" level=info msg="RemoveContainer for \"f54aec5a01086999e10028b2180951a8c412b4e29b46cecd3ec223800277d119\" returns successfully" Oct 2 19:52:28.843624 kubelet[2038]: E1002 19:52:28.842109 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:52:28.843624 kubelet[2038]: E1002 19:52:28.842321 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-g7dbf_kube-system(aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f)\"" pod="kube-system/cilium-g7dbf" podUID=aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f Oct 2 19:52:28.862000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:52:28.865032 kernel: kauditd_printk_skb: 71 callbacks suppressed Oct 2 19:52:28.865097 kernel: audit: type=1400 audit(1696276348.862:1369): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:52:28.862000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001c755c0 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:52:28.872611 kernel: audit: type=1300 audit(1696276348.862:1369): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001c755c0 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:52:28.872732 kernel: audit: type=1327 audit(1696276348.862:1369): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:52:28.862000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:52:28.875745 kernel: audit: type=1400 audit(1696276348.862:1370): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:52:28.862000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:52:28.862000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001c755e0 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:52:28.882521 kernel: audit: type=1300 audit(1696276348.862:1370): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001c755e0 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:52:28.882585 kernel: audit: type=1327 audit(1696276348.862:1370): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:52:28.862000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:52:28.862000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:52:28.888926 kernel: audit: type=1400 audit(1696276348.862:1371): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:52:28.888992 kernel: audit: type=1300 audit(1696276348.862:1371): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4002b23660 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:52:28.862000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4002b23660 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:52:28.892590 kernel: audit: type=1327 audit(1696276348.862:1371): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:52:28.862000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:52:28.863000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:52:28.899036 kernel: audit: type=1400 audit(1696276348.863:1372): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:52:28.863000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000edefc0 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:52:28.863000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:52:29.424380 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030-rootfs.mount: Deactivated successfully. Oct 2 19:52:31.454159 kubelet[2038]: E1002 19:52:31.454132 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:52:31.578086 kubelet[2038]: W1002 19:52:31.578046 2038 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podaa2b2efc_aa2f_40f5_a7dd_ce576daa4a9f.slice/cri-containerd-05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030.scope WatchSource:0}: task 05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030 not found: not found Oct 2 19:52:36.456018 kubelet[2038]: E1002 19:52:36.455976 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:52:41.457077 kubelet[2038]: E1002 19:52:41.457036 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:52:43.416170 kubelet[2038]: E1002 19:52:43.416128 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:52:43.416588 kubelet[2038]: E1002 19:52:43.416347 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-g7dbf_kube-system(aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f)\"" pod="kube-system/cilium-g7dbf" podUID=aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f Oct 2 19:52:46.458167 kubelet[2038]: E1002 19:52:46.458133 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:52:51.459313 kubelet[2038]: E1002 19:52:51.459277 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:52:54.415651 kubelet[2038]: E1002 19:52:54.415615 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:52:54.418761 env[1142]: time="2023-10-02T19:52:54.417730329Z" level=info msg="CreateContainer within sandbox \"72a9f3f639c6e1574dd3d05ff7f609c4eb95cf1af24c9802e7c33c4dcabbb19b\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:52:54.426008 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4264147450.mount: Deactivated successfully. Oct 2 19:52:54.429783 env[1142]: time="2023-10-02T19:52:54.429674651Z" level=info msg="CreateContainer within sandbox \"72a9f3f639c6e1574dd3d05ff7f609c4eb95cf1af24c9802e7c33c4dcabbb19b\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"c2b5a160d26c58e6e0a48c1fec2e52260f770f25536cfbc4b21932674a3ae496\"" Oct 2 19:52:54.431111 env[1142]: time="2023-10-02T19:52:54.430199815Z" level=info msg="StartContainer for \"c2b5a160d26c58e6e0a48c1fec2e52260f770f25536cfbc4b21932674a3ae496\"" Oct 2 19:52:54.446283 systemd[1]: Started cri-containerd-c2b5a160d26c58e6e0a48c1fec2e52260f770f25536cfbc4b21932674a3ae496.scope. Oct 2 19:52:54.460992 systemd[1]: cri-containerd-c2b5a160d26c58e6e0a48c1fec2e52260f770f25536cfbc4b21932674a3ae496.scope: Deactivated successfully. Oct 2 19:52:54.468225 env[1142]: time="2023-10-02T19:52:54.468178475Z" level=info msg="shim disconnected" id=c2b5a160d26c58e6e0a48c1fec2e52260f770f25536cfbc4b21932674a3ae496 Oct 2 19:52:54.468499 env[1142]: time="2023-10-02T19:52:54.468478438Z" level=warning msg="cleaning up after shim disconnected" id=c2b5a160d26c58e6e0a48c1fec2e52260f770f25536cfbc4b21932674a3ae496 namespace=k8s.io Oct 2 19:52:54.468605 env[1142]: time="2023-10-02T19:52:54.468589638Z" level=info msg="cleaning up dead shim" Oct 2 19:52:54.476695 env[1142]: time="2023-10-02T19:52:54.476659974Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:52:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3298 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:52:54Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/c2b5a160d26c58e6e0a48c1fec2e52260f770f25536cfbc4b21932674a3ae496/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:52:54.477069 env[1142]: time="2023-10-02T19:52:54.477016656Z" level=error msg="copy shim log" error="read /proc/self/fd/39: file already closed" Oct 2 19:52:54.481547 env[1142]: time="2023-10-02T19:52:54.477317858Z" level=error msg="Failed to pipe stderr of container \"c2b5a160d26c58e6e0a48c1fec2e52260f770f25536cfbc4b21932674a3ae496\"" error="reading from a closed fifo" Oct 2 19:52:54.481639 env[1142]: time="2023-10-02T19:52:54.481607928Z" level=error msg="Failed to pipe stdout of container \"c2b5a160d26c58e6e0a48c1fec2e52260f770f25536cfbc4b21932674a3ae496\"" error="reading from a closed fifo" Oct 2 19:52:54.483198 env[1142]: time="2023-10-02T19:52:54.483150178Z" level=error msg="StartContainer for \"c2b5a160d26c58e6e0a48c1fec2e52260f770f25536cfbc4b21932674a3ae496\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:52:54.483380 kubelet[2038]: E1002 19:52:54.483350 2038 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="c2b5a160d26c58e6e0a48c1fec2e52260f770f25536cfbc4b21932674a3ae496" Oct 2 19:52:54.483477 kubelet[2038]: E1002 19:52:54.483461 2038 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:52:54.483477 kubelet[2038]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:52:54.483477 kubelet[2038]: rm /hostbin/cilium-mount Oct 2 19:52:54.483477 kubelet[2038]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rt7fn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-g7dbf_kube-system(aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:52:54.483621 kubelet[2038]: E1002 19:52:54.483501 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-g7dbf" podUID=aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f Oct 2 19:52:54.878149 kubelet[2038]: I1002 19:52:54.878124 2038 scope.go:115] "RemoveContainer" containerID="05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030" Oct 2 19:52:54.878462 kubelet[2038]: I1002 19:52:54.878427 2038 scope.go:115] "RemoveContainer" containerID="05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030" Oct 2 19:52:54.880430 env[1142]: time="2023-10-02T19:52:54.880389905Z" level=info msg="RemoveContainer for \"05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030\"" Oct 2 19:52:54.882907 env[1142]: time="2023-10-02T19:52:54.882874082Z" level=info msg="RemoveContainer for \"05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030\"" Oct 2 19:52:54.883093 env[1142]: time="2023-10-02T19:52:54.883058563Z" level=error msg="RemoveContainer for \"05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030\" failed" error="failed to set removing state for container \"05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030\": container is already in removing state" Oct 2 19:52:54.883497 kubelet[2038]: E1002 19:52:54.883399 2038 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030\": container is already in removing state" containerID="05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030" Oct 2 19:52:54.883559 kubelet[2038]: E1002 19:52:54.883513 2038 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030": container is already in removing state; Skipping pod "cilium-g7dbf_kube-system(aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f)" Oct 2 19:52:54.883729 kubelet[2038]: E1002 19:52:54.883702 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:52:54.884402 kubelet[2038]: E1002 19:52:54.884372 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-g7dbf_kube-system(aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f)\"" pod="kube-system/cilium-g7dbf" podUID=aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f Oct 2 19:52:54.887372 env[1142]: time="2023-10-02T19:52:54.887338512Z" level=info msg="RemoveContainer for \"05d4a147cc2641a5ddcbcfa9806ddd77bc035210be4d625816f9cb5f183d8030\" returns successfully" Oct 2 19:52:55.424342 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c2b5a160d26c58e6e0a48c1fec2e52260f770f25536cfbc4b21932674a3ae496-rootfs.mount: Deactivated successfully. Oct 2 19:52:56.460373 kubelet[2038]: E1002 19:52:56.460325 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:52:57.573480 kubelet[2038]: W1002 19:52:57.573425 2038 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podaa2b2efc_aa2f_40f5_a7dd_ce576daa4a9f.slice/cri-containerd-c2b5a160d26c58e6e0a48c1fec2e52260f770f25536cfbc4b21932674a3ae496.scope WatchSource:0}: task c2b5a160d26c58e6e0a48c1fec2e52260f770f25536cfbc4b21932674a3ae496 not found: not found Oct 2 19:53:01.461494 kubelet[2038]: E1002 19:53:01.461426 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:53:06.415576 kubelet[2038]: E1002 19:53:06.415541 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:53:06.415994 kubelet[2038]: E1002 19:53:06.415910 2038 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-g7dbf_kube-system(aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f)\"" pod="kube-system/cilium-g7dbf" podUID=aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f Oct 2 19:53:06.463049 kubelet[2038]: E1002 19:53:06.463022 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:53:11.464310 kubelet[2038]: E1002 19:53:11.464285 2038 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:53:11.867000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:11.872157 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:53:11.872336 kernel: audit: type=1400 audit(1696276391.867:1373): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:11.872372 kernel: audit: type=1300 audit(1696276391.867:1373): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400130eab0 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:53:11.867000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400130eab0 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:53:11.867000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:11.880282 kernel: audit: type=1327 audit(1696276391.867:1373): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:11.880373 kernel: audit: type=1400 audit(1696276391.869:1374): avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:11.869000 audit[1924]: AVC avc: denied { watch } for pid=1924 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:11.869000 audit[1924]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e78140 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:53:11.886788 kernel: audit: type=1300 audit(1696276391.869:1374): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e78140 a2=fc6 a3=0 items=0 ppid=1754 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c835,c970 key=(null) Oct 2 19:53:11.886824 kernel: audit: type=1327 audit(1696276391.869:1374): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:11.869000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:13.090000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:13.090000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4009b321a0 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:53:13.098507 kernel: audit: type=1400 audit(1696276393.090:1375): avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:13.098564 kernel: audit: type=1300 audit(1696276393.090:1375): arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4009b321a0 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:53:13.098587 kernel: audit: type=1327 audit(1696276393.090:1375): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:53:13.090000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:53:13.091000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:13.105285 kernel: audit: type=1400 audit(1696276393.091:1376): avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:13.091000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=40124f0030 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:53:13.091000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:53:13.091000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7043 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:13.091000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7051 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:13.091000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=40124f00c0 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:53:13.091000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=401072a0f0 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:53:13.091000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:53:13.091000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:53:13.092000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:13.092000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:13.092000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=40125b2120 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:53:13.092000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=4009b321c0 a2=fc6 a3=0 items=0 ppid=1775 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c66,c144 key=(null) Oct 2 19:53:13.092000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:53:13.092000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:53:13.127247 env[1142]: time="2023-10-02T19:53:13.127207497Z" level=info msg="StopPodSandbox for \"72a9f3f639c6e1574dd3d05ff7f609c4eb95cf1af24c9802e7c33c4dcabbb19b\"" Oct 2 19:53:13.127642 env[1142]: time="2023-10-02T19:53:13.127285058Z" level=info msg="Container to stop \"c2b5a160d26c58e6e0a48c1fec2e52260f770f25536cfbc4b21932674a3ae496\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:53:13.128798 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-72a9f3f639c6e1574dd3d05ff7f609c4eb95cf1af24c9802e7c33c4dcabbb19b-shm.mount: Deactivated successfully. Oct 2 19:53:13.134000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:53:13.136072 systemd[1]: cri-containerd-72a9f3f639c6e1574dd3d05ff7f609c4eb95cf1af24c9802e7c33c4dcabbb19b.scope: Deactivated successfully. Oct 2 19:53:13.140000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:53:13.164064 sshd[3104]: pam_unix(sshd:session): session closed for user core Oct 2 19:53:13.163000 audit[3104]: USER_END pid=3104 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:53:13.163000 audit[3104]: CRED_DISP pid=3104 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:53:13.165000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.15:22-10.0.0.1:54764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:13.167054 systemd[1]: sshd@29-10.0.0.15:22-10.0.0.1:54764.service: Deactivated successfully. Oct 2 19:53:13.167766 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:53:13.167935 systemd[1]: session-30.scope: Consumed 1.274s CPU time. Oct 2 19:53:13.168566 systemd-logind[1128]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:53:13.169506 systemd-logind[1128]: Removed session 30. Oct 2 19:53:13.172627 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-72a9f3f639c6e1574dd3d05ff7f609c4eb95cf1af24c9802e7c33c4dcabbb19b-rootfs.mount: Deactivated successfully. Oct 2 19:53:13.190144 env[1142]: time="2023-10-02T19:53:13.190088873Z" level=info msg="shim disconnected" id=72a9f3f639c6e1574dd3d05ff7f609c4eb95cf1af24c9802e7c33c4dcabbb19b Oct 2 19:53:13.190868 env[1142]: time="2023-10-02T19:53:13.190845200Z" level=warning msg="cleaning up after shim disconnected" id=72a9f3f639c6e1574dd3d05ff7f609c4eb95cf1af24c9802e7c33c4dcabbb19b namespace=k8s.io Oct 2 19:53:13.190967 env[1142]: time="2023-10-02T19:53:13.190953440Z" level=info msg="cleaning up dead shim" Oct 2 19:53:13.200786 env[1142]: time="2023-10-02T19:53:13.200744804Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:53:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3332 runtime=io.containerd.runc.v2\n" Oct 2 19:53:13.201243 env[1142]: time="2023-10-02T19:53:13.201193888Z" level=info msg="TearDown network for sandbox \"72a9f3f639c6e1574dd3d05ff7f609c4eb95cf1af24c9802e7c33c4dcabbb19b\" successfully" Oct 2 19:53:13.201340 env[1142]: time="2023-10-02T19:53:13.201321769Z" level=info msg="StopPodSandbox for \"72a9f3f639c6e1574dd3d05ff7f609c4eb95cf1af24c9802e7c33c4dcabbb19b\" returns successfully" Oct 2 19:53:13.353504 kubelet[2038]: I1002 19:53:13.351157 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-cilium-run\") pod \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " Oct 2 19:53:13.353504 kubelet[2038]: I1002 19:53:13.351199 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-bpf-maps\") pod \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " Oct 2 19:53:13.353504 kubelet[2038]: I1002 19:53:13.351217 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-xtables-lock\") pod \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " Oct 2 19:53:13.353504 kubelet[2038]: I1002 19:53:13.351235 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-etc-cni-netd\") pod \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " Oct 2 19:53:13.353504 kubelet[2038]: I1002 19:53:13.351261 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-cilium-ipsec-secrets\") pod \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " Oct 2 19:53:13.353504 kubelet[2038]: I1002 19:53:13.351278 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-cilium-cgroup\") pod \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " Oct 2 19:53:13.355145 kubelet[2038]: I1002 19:53:13.351302 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-hubble-tls\") pod \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " Oct 2 19:53:13.355145 kubelet[2038]: I1002 19:53:13.351324 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-rt7fn\" (UniqueName: \"kubernetes.io/projected/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-kube-api-access-rt7fn\") pod \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " Oct 2 19:53:13.355145 kubelet[2038]: I1002 19:53:13.351345 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-clustermesh-secrets\") pod \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " Oct 2 19:53:13.355145 kubelet[2038]: I1002 19:53:13.351361 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-hostproc\") pod \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " Oct 2 19:53:13.355145 kubelet[2038]: I1002 19:53:13.351383 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-cilium-config-path\") pod \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " Oct 2 19:53:13.355145 kubelet[2038]: I1002 19:53:13.351401 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-lib-modules\") pod \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " Oct 2 19:53:13.355534 kubelet[2038]: I1002 19:53:13.351418 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-host-proc-sys-kernel\") pod \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " Oct 2 19:53:13.355534 kubelet[2038]: I1002 19:53:13.351458 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-cni-path\") pod \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " Oct 2 19:53:13.355534 kubelet[2038]: I1002 19:53:13.351479 2038 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-host-proc-sys-net\") pod \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\" (UID: \"aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f\") " Oct 2 19:53:13.355534 kubelet[2038]: I1002 19:53:13.353058 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f" (UID: "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:53:13.355534 kubelet[2038]: I1002 19:53:13.353069 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f" (UID: "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:53:13.356024 kubelet[2038]: I1002 19:53:13.353108 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f" (UID: "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:53:13.356024 kubelet[2038]: I1002 19:53:13.353124 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-hostproc" (OuterVolumeSpecName: "hostproc") pod "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f" (UID: "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:53:13.356024 kubelet[2038]: W1002 19:53:13.353305 2038 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:53:13.356024 kubelet[2038]: I1002 19:53:13.353393 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f" (UID: "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:53:13.356024 kubelet[2038]: I1002 19:53:13.353462 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f" (UID: "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:53:13.356155 kubelet[2038]: I1002 19:53:13.353673 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f" (UID: "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:53:13.356155 kubelet[2038]: I1002 19:53:13.353877 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f" (UID: "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:53:13.356155 kubelet[2038]: I1002 19:53:13.353913 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-cni-path" (OuterVolumeSpecName: "cni-path") pod "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f" (UID: "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:53:13.356155 kubelet[2038]: I1002 19:53:13.353936 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f" (UID: "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:53:13.356155 kubelet[2038]: I1002 19:53:13.355051 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f" (UID: "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:53:13.358015 systemd[1]: var-lib-kubelet-pods-aa2b2efc\x2daa2f\x2d40f5\x2da7dd\x2dce576daa4a9f-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2drt7fn.mount: Deactivated successfully. Oct 2 19:53:13.359423 systemd[1]: var-lib-kubelet-pods-aa2b2efc\x2daa2f\x2d40f5\x2da7dd\x2dce576daa4a9f-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:53:13.359519 systemd[1]: var-lib-kubelet-pods-aa2b2efc\x2daa2f\x2d40f5\x2da7dd\x2dce576daa4a9f-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:53:13.360143 kubelet[2038]: I1002 19:53:13.360112 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f" (UID: "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:53:13.360250 kubelet[2038]: I1002 19:53:13.360233 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f" (UID: "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:53:13.360345 kubelet[2038]: I1002 19:53:13.360329 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f" (UID: "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:53:13.360537 kubelet[2038]: I1002 19:53:13.360516 2038 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-kube-api-access-rt7fn" (OuterVolumeSpecName: "kube-api-access-rt7fn") pod "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f" (UID: "aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f"). InnerVolumeSpecName "kube-api-access-rt7fn". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:53:13.360898 systemd[1]: var-lib-kubelet-pods-aa2b2efc\x2daa2f\x2d40f5\x2da7dd\x2dce576daa4a9f-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:53:13.415969 kubelet[2038]: E1002 19:53:13.415943 2038 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:53:13.452090 kubelet[2038]: I1002 19:53:13.452038 2038 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 19:53:13.452090 kubelet[2038]: I1002 19:53:13.452093 2038 reconciler_common.go:295] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-cilium-ipsec-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:53:13.452238 kubelet[2038]: I1002 19:53:13.452103 2038 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 19:53:13.452238 kubelet[2038]: I1002 19:53:13.452112 2038 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 19:53:13.452238 kubelet[2038]: I1002 19:53:13.452122 2038 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-rt7fn\" (UniqueName: \"kubernetes.io/projected/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-kube-api-access-rt7fn\") on node \"localhost\" DevicePath \"\"" Oct 2 19:53:13.452238 kubelet[2038]: I1002 19:53:13.452132 2038 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:53:13.452238 kubelet[2038]: I1002 19:53:13.452141 2038 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 19:53:13.452238 kubelet[2038]: I1002 19:53:13.452150 2038 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 19:53:13.452238 kubelet[2038]: I1002 19:53:13.452160 2038 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:53:13.452238 kubelet[2038]: I1002 19:53:13.452169 2038 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 19:53:13.452419 kubelet[2038]: I1002 19:53:13.452178 2038 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 19:53:13.452419 kubelet[2038]: I1002 19:53:13.452187 2038 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:53:13.452419 kubelet[2038]: I1002 19:53:13.452196 2038 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 19:53:13.452419 kubelet[2038]: I1002 19:53:13.452205 2038 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 19:53:13.452419 kubelet[2038]: I1002 19:53:13.452214 2038 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 19:53:13.911263 kubelet[2038]: I1002 19:53:13.911231 2038 scope.go:115] "RemoveContainer" containerID="c2b5a160d26c58e6e0a48c1fec2e52260f770f25536cfbc4b21932674a3ae496" Oct 2 19:53:13.913355 env[1142]: time="2023-10-02T19:53:13.913321439Z" level=info msg="RemoveContainer for \"c2b5a160d26c58e6e0a48c1fec2e52260f770f25536cfbc4b21932674a3ae496\"" Oct 2 19:53:13.915136 systemd[1]: Removed slice kubepods-burstable-podaa2b2efc_aa2f_40f5_a7dd_ce576daa4a9f.slice. Oct 2 19:53:13.918469 env[1142]: time="2023-10-02T19:53:13.917241633Z" level=info msg="RemoveContainer for \"c2b5a160d26c58e6e0a48c1fec2e52260f770f25536cfbc4b21932674a3ae496\" returns successfully" Oct 2 19:53:14.418604 kubelet[2038]: I1002 19:53:14.418577 2038 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f path="/var/lib/kubelet/pods/aa2b2efc-aa2f-40f5-a7dd-ce576daa4a9f/volumes"